> Cause not stated in filing
The Housing & Redevelopment Authority of Clay County data breach investigation
The Housing & Redevelopment Authority of Clay County in Indiana reported a data breach, confirming that highly sensitive personal and financial information of residents was exposed. This incident raises significant concerns about the security of critical data used for housing assistance programs and the potential for identity theft and fraud.
- Filed
- September 17, 2026
- Regulator
- Indiana AG
- People affected
- Not stated
- File status
- Monitoring
What the filing confirms
- The Housing & Redevelopment Authority of Clay County reported the incident to the Indiana Attorney General.
- Information involved: Full Name, Social Security Number, Date of Birth, Home Address, Income and Wage Verification Records, Tax Return Information, Banking and Direct Deposit Details, Government ID Number.
Still unknown
- How many people were affected. The filing does not give a number.
- What caused the incident beyond the description in the filing.
- How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Investigation notes
The Housing & Redevelopment Authority of Clay County, located in Indiana, reported a data security incident to state authorities on September 17, 2026. This breach, identified as occurring on or about June 19, 2026, confirms the unauthorized access to and potential exposure of highly sensitive personal information. The compromised data includes Full Name, Social Security Number, Date of Birth, Home Address, Income and Wage Verification Records, Tax Return Information, Banking and Direct Deposit Details, and Government ID Number.
As a key provider of housing assistance and community programs, the Authority collects and maintains exceptionally private details from residents. The exposure of such comprehensive personal and financial identifiers, including Social Security Numbers and banking information, places affected individuals at a significantly elevated risk of severe identity theft, various forms of financial fraud, and other long-term harms. For those who rely on these services, the consequences of such a compromise can be particularly destabilizing.
Under Indiana's data protection statutes and relevant federal regulations, the Housing & Redevelopment Authority of Clay County is legally bound to implement robust safeguards to protect the sensitive information entrusted to its care. The occurrence of this data breach indicates a potential failure to meet these mandatory standards of security, raising questions about the adequacy of their administrative, physical, and technical protections designed to prevent unauthorized data access.
If you received a notification letter from the Housing & Redevelopment Authority of Clay County, it confirms your personal data was part of this security incident. Our firm is currently investigating the circumstances surrounding this breach, focusing on the Authority's adherence to data security best practices and its notification timing. Individuals affected have a right to understand the full impact and to explore their legal options without upfront costs through a confidential case review.
What our attorneys examine
A cyberattack does not excuse a company from protecting the information it holds. We look at whether The Housing & Redevelopment Authority of Clay County used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Indiana.
Other open files in Indiana
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.