On June 9, 2026, New York State Comptroller Thomas P. DiNapoli posted audits of the local government and school entities listed below on the Internet.
Click on the text highlighted in COLOR to access the audit.
Glen Cove City School District – Information Technology (Nassau County) District officials did not adequately manage network user accounts. As of May 2025, 296 of the district’s 1,104 enabled nonstudent network user accounts were not needed and should have been disabled. Six unneeded network user accounts also had administrative permissions. Unneeded user accounts are additional entry points into the network and, if compromised by an attacker, could be used to inappropriately access the network, make unauthorized changes to records or deny legitimate access to the network and records.
Levittown Union Free School District – Information Technology (Nassau County) District officials did not adequately manage nonstudent network accounts and permissions. As a result, the district had an increased risk of unauthorized access to its network and systems, which could lead to the loss of data and network resources.
Middlesex Hose Company, Inc. – Fundraising (Yates County) Company officials did not ensure that fundraising collections were properly recorded, reported and safeguarded. As a result, the executive committee did not have reliable information to oversee fundraising activities, and the company had an increased risk that fundraising collections could be lost or stolen without detection.
Wrights Corners Fire Company, Inc. – Treasurer’s Records and Reports (Niagara County) The treasurer did not maintain complete financial records or record transactions in a timely manner. The treasurer also did not record financial activity with sufficient detail, including the source of deposits and purpose of disbursements, or prepare and submit accurate financial reports, bank reconciliations and budget status reports to the executive board monthly. More than $1.1 million in checks were recorded in the accounting records, on average, 59 days after receipt.
Eldred Central School District – Building Access (Orange County/Sullivan County) District officials did not properly manage and monitor building access accounts and devices. Specifically, the district had active but unneeded accounts with assigned access badges in the system. As a result, there was an increased risk of unauthorized access to school buildings, potentially compromising the security and safety of students, teachers, staff and visitors.
Village of Wappingers Falls – Audit Follow-Up (Dutchess County) The purpose of the review was to assess the village’s progress in implementing recommendations from the prior audit, Village of Wappingers Falls – Board Oversight, released in December 2023. That audit determined village officials did not provide adequate oversight of financial operations and capital projects. Auditors found that the board did not make progress implementing recommendations related to oversight of financial operations and banking transactions or monitoring capital projects. Of the report’s 13 recommendations, village officials implemented one recommendation, partially implemented one recommendation and did not implement 11 recommendations.
###