WNY Counties Receive $9M Cybersecurity Grant for MFA Tokens

New York State is bolstering its cybersecurity defenses with a February 2, 2026 announcement of a $9 million federal grant aimed at protecting local governments and school districts from increasingly sophisticated cyber threats. The funding, distributed through the State and Local Cybersecurity Grant Program, will focus on implementing multi-factor authentication (MFA) across 161 government entities statewide.

What is Multi-Factor Authentication and Why is it Important?

Multi-factor authentication isn’t a new technology, but its adoption remains uneven, particularly among smaller municipalities and school systems. MFA requires users to provide two or more verification factors to gain access to systems, significantly reducing the risk of unauthorized access even if a password is compromised. These factors can include something you know (a password), something you have (a physical token or a code sent to your phone), or something you are (biometric data like a fingerprint).

The vulnerability MFA addresses is the reliance on passwords alone. Passwords, despite best practices, are frequently weak, reused across multiple services, or obtained through phishing attacks and data breaches. MFA adds a critical layer of security, making it substantially harder for attackers to gain access, even with stolen credentials. The “hard tokens” being distributed through this grant program represent a physical component of that second factor, offering a more secure alternative to SMS-based codes, which have known vulnerabilities.

The Scope of the Grant and Regional Impact

While the initial announcement doesn’t detail the specific allocation of funds to each entity, the grant will benefit Allegany, Chautauqua, Cattaraugus, Erie, Orleans and Niagara counties. The funds will be used to procure and deploy these MFA hard tokens to school districts, towns and villages within those regions. This targeted approach recognizes the critical role these local entities play in delivering essential services and the potential disruption caused by a successful cyberattack.

According to Governor Kathy Hochul, Cyber threats are everywhere and with the important role technology plays in our day-to-day lives, It’s crucial that organizations have the resources they need to keep themselves safe. She emphasized that the state is proactively strengthening our defenses across the state rather than waiting for an incident to occur.

Federal Support and Program Oversight

The $9 million in funding originates from a combined federal allocation for fiscal years 2022 and 2023. The funds are administered by the Federal Emergency Management Agency (FEMA) and the Cybersecurity and Infrastructure Security Agency (CISA), both key federal agencies responsible for national cybersecurity efforts. This highlights the growing federal recognition of the need to support state and local governments in bolstering their cybersecurity posture.

New York’s Office of Information Technology Services (ITS) will oversee the program, working in coordination with the Division of Homeland Security and Emergency Services and the State and Local Cybersecurity Grant Planning Committee. This collaborative approach aims to ensure efficient and effective deployment of the MFA tokens and provide ongoing support to recipient entities.

Broader Context: Rising Cyber Threats and Proactive Measures

The timing of this grant announcement is significant. Cyberattacks against critical infrastructure, schools, and local governments have been on the rise in recent years. Ransomware attacks, in particular, have become increasingly prevalent, disrupting essential services and causing significant financial losses. The proactive investment in MFA reflects a broader shift towards a more preventative cybersecurity strategy.

Representative Tim Kennedy underscored the importance of the funding, stating, This $9 million investment will deliver critical multi-factor authentication hard tokens to counties, school districts, and local governments across Erie and Niagara Counties – strengthening our defenses, protecting public services, and keeping residents’ data safe. This statement emphasizes the direct benefit to constituents and the protection of vital public services.

Looking Ahead: Ongoing Cybersecurity Challenges

While the implementation of MFA is a crucial step, it’s important to recognize that it’s not a silver bullet. Cybersecurity is a constantly evolving landscape, and attackers are continually developing new tactics and techniques. Ongoing training for employees, regular security assessments, and robust incident response plans are also essential components of a comprehensive cybersecurity strategy.

the effectiveness of MFA relies on proper implementation and user adoption. Organizations must ensure that users understand how to use the tokens and that the system is properly configured to maximize security. The New York State ITS will likely play a key role in providing guidance and support to recipient entities in this regard.

This grant represents a significant investment in New York’s cybersecurity infrastructure, but it’s just one piece of a larger puzzle. Continued vigilance, collaboration, and investment will be necessary to protect against the ever-evolving threat landscape.