Galveston County commissioners voted Monday to file claims against three county departments over the loss of more than $500,000 to a computer scammer earlier this year.

The county also released a report by a private forensic group that determined, to the disappointment of County Judge Mark Henry, that the blame for the loss of didn’t rest on a “single department or a single individual associated with Galveston County.”

Henry had hoped the company would be more specific about which people within the county were to blame for the loss of funds, he said.

“They sold us a bill of goods and didn’t deliver on it,” Henry said. “I think they intentionally avoided assigning blame. That is not what they told us they’d do.”

A scammer posing as a county contractor in May tricked an employee in the county’s purchasing department into changing how and where a $525,282 payment for road work would be made. The scammer has not been caught and the money has not been recovered.

On Monday, after meeting in private with the county’s legal department, commissioners unanimously voted to pursue claims against the surety bonds held by the county auditor, county treasurer and county purchasing agent over the lost funds.

It’s not clear whether the claim will be successful, but Precinct 1 Commissioner Darrell Apffel said the county had a “duty and obligation” to try to recover the money in whatever ways are possible.

“Don’t take this personal or as a fault,” Apffel said to County Auditor Randall Rice during the meeting. “We’ve got to do what we’ve got do to get this money.”

Public officials in Texas are required to procure bonds before taking office. The premium of the bonds are paid for by the county. If the claims are accepted by the bonding company, it’s possible that future premiums will increase, Henry said.

The vote authorized the legal department to research the issues around making the bond claims, Henry said.

“None of us are 100 percent familiar with the mechanics of it,” Henry said.

Less than an hour after voting to move forward on the claims, the county released the report from the Dawson Forensic Group it commissioned in July.

The report confirmed the description of the scam county officials related just after the event.

The scammer used a form obtained through the county’s website to request a change on the bank account information for the road contractor — requesting that instead of paying with a paper check, the county send funds to an account through an electronic transfer.

The scammer created fake email addresses to pose as both a county employee and the contractor, essentially becoming a middleman for communications between the two sides.

The scammer used email addresses that were “close to, but not identical to” the real email addresses used by the county and the contractor, according to the report.

When the scammer submitted the form to the county purchasing department, no one checked that the new bank account was valid, according to the report.

“Believing that the treasurer’s office employee had validated the vendor information provided in the request,” the purchasing department changed the payment information in its system, the report stated.

Previously, county officials said the attack happened over the course of months, and that the scammers presented forged signatures to help them convince the county that the change in accounts was authentic.

County employees failed to recognize the attack as it was happening, the report stated. The county also lacked validation processes and county departments didn’t have a clear understanding about who was responsible for validating the accounts, according to the report.

The report does not place blame on a single office for the mishap.

“A department or individual cannot be held accountable for noncompliance with processes that may not have been properly designed or that did not exist,” the report stated.

The report also lauded the changes that the auditor, purchasing department and treasurer had made since the scam was revealed. That work was done so thoroughly that the forensic group said its costs were lower than the $14,900 it had originally quoted the county.

The company has not yet submitted a final invoice for its investigation, a county spokesman said.

John Wayne Ferguson: 409-683-5226; or on Twitter @johnwferguson.


Senior Reporter

(5) comments

David Schuler

Two scams for the price of one!

Paul Hyatt

What is amazing is that NO ONE thought to pick up the phone and call these people that they were sending the money to. Digital communications are wonderful, but they have been able to be scammed for years and you would think that people in finance departments would know that by now. Must be wonderful to work for the government where no one is held accountable for anything and they get to keep their jobs at our expense....

Leigh Cowart

And the financial end? The information on that? This just boggles the mind. And we paid over 10 grand for WHAT? There is still not enough information here...

Miceal O'Laochdha

“They sold us a bill of goods and didn’t deliver on it,” I suggest that Mark Henry use the exact same process to pay the Dawson Group's invoice that was utilized to pay the original, phony, invoice that started this circus. Maybe then their consultants will be able to identify who is to blame??

Rusty Schroeder

"tricked an employee in the county's purchasing department" , how much more information is needed? This is a continued joke, The Judge and the Commissioners ought to be embarrassed of themselves for not taking action. This comedy of errors will probably give the bonding companies a way out of paying a settlement. This firm that was hired to do the report and audit looks to have yukked it up with the 3 departments they were investigating. No fault found of the 3, yet accolades for their implementations of not letting it happen again. Only in Galveston County.

Welcome to the discussion.

Keep it Clean. Please avoid obscene, vulgar, lewd, racist or sexually-oriented language.
Don't Threaten. Threats of harming another person will not be tolerated.
Be Truthful. Don't knowingly lie about anyone or anything.
Be Nice. No racism, sexism or any sort of -ism that is degrading to another person.
Be Proactive. Use the 'Report' link on each comment to let us know of abusive posts.
Share with Us. We'd love to hear eyewitness accounts, the history behind an article.

Thank you for Reading!

Please log in, or sign up for a new account and purchase a subscription to read or post comments.