On June 30, 2026, the District of Columbia Housing Authority (DCHA) discovered a cybersecurity incident that led to systems being shut down. A ransomware group, Interlock, claims to have exfiltrated 1.6 TB of data, including passports and client databases. DCHA, however, has not confirmed that any data was compromised or exfiltrated, stating they are still investigating the extent of the incident.
DCHA serves residents of the District of Columbia and collects sensitive information such as Social Security numbers, medical data, financial information, and other personal details from residents, voucher recipients, and landlords. The unverified claims of the ransomware group suggest compromise of these data types. The number of affected individuals remains unknown, and DCHA has not released an estimated count.
Regulators have not been notified, and no breach notification letters have been sent to consumers as of July 17, 2026, as the agency continues its assessment. The full implications of this incident are still under investigation, and further details may emerge.