Schnirman: Transparency for thee but not for me
Nassau Comptroller Jack Schnirman, whose fundraising appeals consistently tout his efforts toward increased transparency, gave less than clear answers when questioned Wednesday about his office falling for a $710,000 phishing scam.
At a hearing of the county legislature's Finance Committee, the Democratic comptroller refused to give specifics about the cyberattack he announced at a news conference Jan. 10 with Nassau Police Commissioner Patrick Ryder.
At the news conference, Schnirman and Ryder said a scammer had impersonated a real county vendor in an email and directed the comptroller's office to make payments to a new account. The $710,000 in taxpayer money subsequently was recovered after a joint investigation by the comptroller's office, the county treasure, police, banks and the district attorney. No arrests have been made.
Citing security concerns, Schnirman and his staff representatives at yesterday's hearing declined to say how many payments were made to the new account, when they were made, who authorized them, who was to blame for the mistake, who was notified of the scam, when they were notified or even what steps had been taken to prevent future fraud -- though Schnirman said his office fended off a similar attack in December.
They acknowledged, however, the comptroller's office first learned of the problem when it was notified by the bank that the new account was fraudulent.
They added they would address legislators' questions in a confidential memo within a week.
But when Republican Legis. John Ferretti of Levittown said he had a copy of the email that started the cyberattack, Schnirman wanted immediate answers.
At a hearing of the county legislature's Finance Committee, the Democratic comptroller refused to give specifics about the cyberattack he announced at a news conference Jan. 10 with Nassau Police Commissioner Patrick Ryder.
At the news conference, Schnirman and Ryder said a scammer had impersonated a real county vendor in an email and directed the comptroller's office to make payments to a new account. The $710,000 in taxpayer money subsequently was recovered after a joint investigation by the comptroller's office, the county treasure, police, banks and the district attorney. No arrests have been made.
Citing security concerns, Schnirman and his staff representatives at yesterday's hearing declined to say how many payments were made to the new account, when they were made, who authorized them, who was to blame for the mistake, who was notified of the scam, when they were notified or even what steps had been taken to prevent future fraud -- though Schnirman said his office fended off a similar attack in December.
They acknowledged, however, the comptroller's office first learned of the problem when it was notified by the bank that the new account was fraudulent.
They added they would address legislators' questions in a confidential memo within a week.
But when Republican Legis. John Ferretti of Levittown said he had a copy of the email that started the cyberattack, Schnirman wanted immediate answers.
"Can I ask how and why you have a
copy of that email?" Schnirman demanded.
"It was given to me a few minutes ago," Ferretti answered.
"By whom?" Schnirman asked.
"I get to ask the questions," Ferretti responded. "I will send you a memo."
Finance committee chairman Howard Kopel (R-Lawrence) stopped the dispute and told both to move on.
And later, when Finance committee member Legis. Carrie Solages (D-Elmont) demanded to know when and how Ferretti got the email, Kopel said, "I will answer that question."
"Counsel requested that the police department show it to him. The police department agreed to show it to him. We just saw it and we showed it to you," Kopel said.
"There is nothing scary about this. We
asked for it and you didn’t."
Comments
Post a Comment