On January 30, 2025 Sheriff Rich McNamee publicly informed the Board of Supervisors that he had not received a portion of his paychecks for the last three pay periods. The matter was referred to the lowa Division of Criminal Investigation and an administrative investigation was begun.
Finding of Facts: On or about December 10, 2024 Henry County and other lowa counties were hit with a phishing attack (scam emails) aimed at duping counties into changing an employee’s direct deposit to Green Dot bank account. At that time, a newer Henry County employee was taken in by scam emails purportedly from Rich McNamee asking to change his direct deposit. This change was made on December 10, 2024. Approximately a month and a half later, during the week of January 24, 2025, the County Auditor’s office was made aware of the issue. McNamee was asked about the delay in noticing and reporting the issue despite missing the major portion of three paychecks. He responded that he usually only reconciles his checking account at the end of the month (although not this December), but became aware when he tried to withdraw funds from his bank in late January and was told he didn’t have enough money in his account.
Conclusion: DCI continues the outside investigation into the phishing attacks. Sheriff McNamee was made whole. Corrective actions have been taken in the auditor’s office including additional safeguards against scams. All Henry County employees are encouraged to check their bi-weekly paystubs for inaccuracies to ensure that the County can respond immediately.
Respectfully submitted,
Steve Giebelhausen
Assistant County Attorney