>> I'M DIONNE LIM AND I'M DAN ASHLEY. WE'LL MOVE NOW TO TONIGHT'S TOP STORY COMING FROM THE ABC SEVEN NEWS I-TEAM. >> IT HAS BEEN TEN MONTHS SINCE THE CITY OF OAKLAND WAS HACKED. THE PERSONAL INFORMATION OF TENS OF THOUSANDS OF PEOPLE WAS LEAKED ONTO THE DARK WEB. >> AND THE ABC SEVEN NEWS I-TEAM WAS FIRST TO REPORT THE LACK OF OVERSIGHT, AND THAT DOZENS OF VICTIMS WERE NEVER NOTIFIED THAT THEIR SENSITIVE FINANCIAL INFORMATION WAS EXPOSED. >> I WAS TRAPPED IN A NIGHTMARE. I HAVE NO IDEA WHAT'S IN MY NAME, AND TONIGHT WE ARE LEARNING WHAT'S HAPPENED SINCE. >> THAT'S RIGHT. >> I-TEAM REPORTER STEPHANIE SIERRA HAS BEEN TRACKING EVERY DEVELOPMENT OF THIS STORY. SHE IS HERE TONIGHT WITH DETAILS. STEPHANIE >> YEAH, THERE'S BEEN A LOT OF THEM. DAN AND DION, ESPECIALLY GIVEN WE'VE BEEN FOLLOWING THIS NOW FOR NEARLY A YEAR. THINKING BACK, THE AFTERMATH OF THIS HACK STARTED WITH ONE OVERSIGHT AFTER ANOTHER, AND THE CITY EVEN ADMITS THEY WERE NOT PREPARED. THERE WAS OUTDATED IT INFRASTRUCTURE, A LACK OF WARNING AND A LACK OF OVERALL INVESTMENT. TONIGHT WE WANT TO INTRODUCE YOU TO ONE OF THE VICTIMS THAT'S LIVING WITH THE IMPACTS. >> ADDRESS A DRIVER'S LICENSE NUMBER, SOCIAL SECURITY NUMBER. >> OAKLAND NATIVE DEDRICK WARMACK IS LIVING THROUGH A FINANCIAL NIGHTMARE ON A CREDIT REPORT. >> THERE'S CREDIT CARDS THAT SHOULD HAVE BEEN CLOSED. THEY'RE NOW OPEN WITH BALANCES. OF LIKE 17,000, UM, 30 SOMETHING THOUSAND AND I DON'T HAVE THEM RIGHT NOW. YEAH, I HAVE NO IDEA WHAT'S GOING ON. >> MONTHS AFTER THE CITY'S NETWORK WAS HACKED, HE SAYS HIS CREDIT SCORE DROPPED MORE THAN 200 POINTS. BUT LITTLE DID HE KNOW, THAT WAS ONLY THE BEGINNING. DO YOU THINK YOUR IDENTITY WAS STOLEN FROM THE OAKLAND HACK? >> YES, YES. I MEAN, I'M GETTING THE PHONE CALLS, THE EMAILS THAT I GET STATING, OH, YOU HAVE THIS ACCOUNT, YOU HAVE THAT ACCOUNT. I'VE BEEN GETTING LETTERS FROM CHASE AND BANK OF AMERICA. I DON'T HAVE A BANK ACCOUNT HERE. >> AFTER THE HACK, THE I-TEAM CONSULTED CYBERSECURITY PROFESSIONALS TO DOWNLOAD THE LEAKED DATA. THIS WAS AN ATTEMPT TO GET A BETTER IDEA OF THE IMPACTS FACING VICTIMS DUE TO A LIMITED RESPONSE FROM THE CITY. THAT'S WHEN WE FOUND WARMACK. SOCIAL SECURITY NUMBER PUBLISHED ON THE DARK WEB. >> IF YOU LOOK AT MY EMAIL NOW, MY ENTIRE LIST OF EMAILS, IT ALL READS FRAUD. IT LOOKS LIKE MY JUNK MAIL. >> WARMACK IS ONE OF DOZENS OF VICTIMS THE I-TEAM CONTACTED WHO PREVIOUSLY FILED A CLAIM WITH THE CITY, ALLEGING INJURY, BUT INSTEAD ENDED UP WITH THEIR SENSITIVE FINANCIAL INFORMATION LEAKED. NOW, HE SAYS FRAUDULENT CHECKS ARE BEING MADE IN HIS NAME, SO I DON'T KNOW WHAT THIS IS. $2,000? >> YEAH. TO STRANGE SEWAGE AND WATER BILLS BEING SENT TO HIM. THE WATER AND SEWAGE WASN'T FROM EAST BAY. MUD LIKE, WHAT IS THAT? IS THAT NEW ENGLAND? SO HOW CAN I HAVE AN OPEN BALANCE? AND THEN THIS THERE'S THINGS THAT ARE POPPING UP ON MY PHONE. PHONE. I'M GETTING NOTICES ABOUT REFINANCING A HOME, AND I'M LIKE, I PAY RENT. >> WARMACK BELIEVES SOMEONE HAS EVEN PURCHASED A HOME IN HIS NAME. SOMEBODY HAS SOMETHING IN MY NAME SOMEWHERE. >> SINCE OCTOBER, I'VE BEEN GETTING THINGS FROM BEST BUY ABOUT KITCHEN INSTALLATIONS AND TO ADD TO THE STRESS, HE SAYS HE DIDN'T EVEN KNOW ABOUT IT UNTIL WE CONTACTED HIM. >> NOW HE'S SCRAMBLING TO GET HELP. LIKE MANY OTHERS. IN APRIL, WE SPOKE TO DOZENS OF VICTIMS ON THE PHONE AND IN PERSON, BUT NOT ONE SAID THEY RECEIVED ANY NOTICE FROM THE CITY THAT THEIR PERSONAL AND FINANCIAL INFORMATION WAS IMPACTED. WE KEPT SOME OF THEIR IDENTITIES ANONYMOUS. >> MY INFORMATION WAS FOUND ON THE DARK WEB WITH AN APARTMENT IN MY NAME, WITHOUT ME EVEN KNOWING. >> IN MARCH, THE IT MASKED MAYOR SHENGTAO. HOW FAR ALONG HER ADMINISTRATION WAS INFORMING THE THOUSANDS OF PEOPLE IMPACTED BY THE BREACH. BUT WE DID NOT GET A STRAIGHT ANSWER. ARE YOU 50% DONE WITH THAT PROCESS? >> DO YOU KNOW IF YOU'RE ALMOST DONE WITH THAT PROCESS WHERE DOES THAT THAT'S GOING TO BE AN ONGOING PROCESS. >> WE HAVE NOTIFIED THE CURRENT EMPLOYEES AND NOT JUST THAT, BUT WE ARE NOW NOTIFYING EMPLOYEES THAT HAVE LEFT THE CITY. >> THE CITY'S IGNORED OR IGNORED AND STONEWALLED ITS OWN EMPLOYEES. >> THAT WAS TEN MONTHS AGO TODAY , WE'RE TOLD THE CITY'S NOTIFICATION PROCESS HAS BEEN COMPLETED FOR SEVERAL MONTHS, BUT THE I-TEAM CONTINUES TO RECEIVE COMPLAINTS FROM RESIDENTS AFFECTED. I NEVER HEARD ANYTHING, NO, NO. IN MAY, THE MAYOR COMMITTED TO SPENDING AN ADDITIONAL $10 MILLION TO UPGRADE AND HARDEN THE CYBERSECURITY PROTECTIONS OVER THE NEXT TWO YEARS, DOCUMENTS OBTAINED BY THE I-TEAM FROM THE CITY ADMINISTRATOR'S OFFICE SHOW ONLY 30% OF THAT GOAL HAS BEEN SPENT SINCE, INCLUDING THE RESTORATION OF OPD'S CCTV SERVER , WHICH THE MAYOR SAYS IS NOW FULLY OPERATIONAL. BUT OTHER CONCERNS STILL LINGER. >> WE'RE NOT MANAGING OR DIRECTING PROPERLY. >> ON THE HEELS OF A MULTI-MILLION DOLLAR MISSED OPPORTUNITY TO FIGHT RETAIL THEFT FOLLOWING 1009 11 DISPATCHER APPLICATIONS OVERLOOKED THAT SOME CITY OFFICIALS ARE CONCERNED ABOUT ANOTHER MISTAKE, INCLUDING CYBER INSURANCE. EIGHT MONTHS AGO, THE I-TEAM CONSULTED CYBER SECURITY EXPERTS TO WEIGH IN ON OAKLAND'S CURRENT POLICY. DO YOU THINK OAKLAND'S COVERAGE IS SUFFICIENT ENOUGH TO PROTECT AGAINST A RANSOMWARE ATTACK? >> NO. IT'S IT SEEMS LIKE IT'S MOSTLY COVERING, UH, COMPREHENSIVE ELECTRONIC INFORMATION AND SECURITY LIABILITY COVERAGE, SHUTTING DOWN SYSTEMS, THE DOWNSTREAM EFFECT, NOT ABLE TO DELIVER SERVICES. THIS POLICY NOT NECESSARILY DESIGNED TO MEET THOSE NEEDS, BUT THE I-TEAM WAS TOLD THE CITY'S CYBER INSURANCE POLICY HAS NOT CHANGED. >> IT'S LEAVING VICTIMS LIKE WARMACK WANTING TO LEAVE THE CITY WORRIED. THIS NIGHTMARE WON'T END. >> YOU KNOW, IF OAKLAND CAN'T PROTECT THEMSELVES, HOW ARE THEY GOING TO PROTECT OUR INFORMATION ? >> EVEN NOW, CYBER ANALYSTS SAY ONE OF THE GROUPS THAT HACKED OAKLAND ALSO ATTACKED THE CITY OF EL CERRITO. AND SINCE THEN, DATA SHOWS THE TRANSIT AGENCY BART, AS WELL AS THE CITIES OF MODESTO AND HAYWARD, ALSO GOT HIT WITH RANSOMWARE ATTACKS THIS YEAR. SO IT GOES TO SHOW THE OVERALL NEED FOR IT INFRASTRUCTURE AND INVESTMENTS. CERTAINLY YOU CAN ONLY IMAGINE
