Multiple attempts to transfer money from the accounts began on April 19, the commission learned, according to a written statement created by county employees. After normal payroll had already been run, a batch of checks totaling $135,458 and another batch totaling $2.8 million was sent to the bank for payment — for withdrawal — using an employee’s login and password. The batches appeared to have originated from the employee’s internet protocol address on the county’s network, according to the statement. In addition there were attempts to send at least six wire transfers, the statement said.
Metro Bank contacted the county for confirmation and the fraudulent checks and wire transfers were stopped.
After the county’s network was again declared safe, the employee’s login, password and address were changed. Another attempt to hack the accounts was made on April 25 and then again on April 29, according to the statement.
Swafford said this is the first time the county’s account has been hacked but it hasn’t happened since the April attacks.
The county notified the Federal Bureau of Investigation and the Alabama Department of Homeland Security which are now investigating, Swafford said. All of the county records of the incidents have been released to the department in the last two weeks, he added.
“They’re making a case against one of the folks who owned the account that some of the money was being transferred to,” Swafford said.
But to keep it from happening again, Save Your Data, which is the county’s technology consultant, and the bank worked together to improve the county’s network security, Swafford said.
“The majority of the work was done by our IT consultant and Metro Bank,” Swafford said. “They were superb.”
Save Your Data installed hardware-driven security, he said. Swafford declined to talk about what other security measures have been put in place.
“None of those (attempts) were successful and we’ve even put additional stopgap measures in place to ensure that that is even less likely to take place,” he said.
In other business the commission:
— Approved spending less than $500 for a new battery and electrode pads for an automatic external defibrillator at the Fruithurst Senior Center.
— Declared Thanksgiving week as National Farm City Week in Cleburne County.
— Declared Nov. 19 as Retired Teachers’ Day in Cleburne County.
— Approved a request by Stephen and Wendy Brooks to locate a family cemetery at 119 County Road 432.
— Heard from Grady Parsons of Living Water Services that he would need an estimate of how much money the county would charge annually for the oversight of an on-site waste treatment center at the Alabama Welcome Center in Cleburne County. He also asked for an estimate of attorney fees to review the contracts. Living Water Services would maintain and operate the treatment center for the Alabama Department of Transportation. But the county would have to have a government utility corporation with its own board to oversee the center, Parsons said. The commission approved creating the corporation at its March meeting.
Staff writer Laura Camper: 256-235-3545. On Twitter @LCamper_Star.