Housing and Redevelopment Authority (HRA) of Clay County

L&Q's website was hit by a targeted cyber-attack in late September 2026, and the autoreply system tied to its webforms handed over the emails and messages of roughly 12,000 residents. The company calls its 'wider operating systems,' holding financial and tenancy data, secure, as if the contact channel residents actually use wasn't part of the perimeter too. No named attacker, no stated entry point beyond the webform pipeline itself. A front door was left open while the filing cabinets got all the locks.