PORT ANGELES — A computer forensics company is still investigating a possible data breach that may have compromised credit cards of city customers who pay their utility bills online, Port Angeles City Manager Dan McKeen said Thursday.
The city last month hired Navigant, a forensics accounting and investigations firm, to examine potential fraud after customers reported that their credit card information had been hacked and fraudulent purchases had been made.
“At this point, they’re still trying to pinpoint exactly what happened, how it happened and, quite frankly, even if it happened,” McKeen said in an interview.
“There’s nothing we can pinpoint at this point.”
Navigant is investigating an “abnormality” that was discovered July 24 on a city server that prompted 20 initial reports from online-paying customers who said their data had been compromised, McKeen said after the discovery.
McKeen on Thursday said the firm’s services would likely exceed $60,000. The city has an insurance policy that will limit that expense to $25,000, he added.
The FBI has opened an investigation and is awaiting information from the computer forensics firm.
City officials plan to issue a news release about the forensic investigation early next week.
“I was hoping by now we would know more,” McKeen said.
The city will not accept online utility payments until the investigation is complete.
Credit card payments can be made during normal business hours at Port Angeles City Hall, 321 E. Fifth St. Checks and credit card numbers are being accepted via mail.
“We have a secured backup system going,” McKeen said, “but we do appreciate everybody’s patience as we work through this issue.
“We want to make sure that we have a very thorough investigation done, and when we bring back our service to where it was prior to this, [customers] can feel good that we have everything in place to make sure that their information is secure.”
Notices about the anomaly were mailed July 25 to about 9,400 Port Angeles utility customers.
At that time, customers were advised to verify their credit card or debit card activity.
Late fees and delinquency notices were suspended for city utility customers, McKeen announced Aug. 1.
An estimated 1,500 city residents use the city’s website, www.cityofpa.us, to pay their utility bills.
“We’re getting an excellent opportunity to have our system completely examined by outside experts, who will also be providing recommendations at the end of the day to ensure that we have the latest recommendations on providing a secure system,” McKeen said.
________
Reporter Rob Ollikainen can be reached at 360-452-2345, ext. 56450, or at rollikainen@peninsuladailynews.com.
