MARQUETTE, MI— A former information systems manager is suing Marquette County under the Whistleblower Protection Act.
Paul Carley was hired by the county in 2012 and had a clean employment record during his career.
According to the lawsuit, this past July the county underwent an annual state audit of its information systems. Officials also hired Houghton-based Karhu Cyber Security to audit the systems. Carley told county officials two audits couldn’t be performed at the same time, as they would trigger each other and be ineffective.
Around July 7, 2025, the county’s network began receiving intrusion detection alarms. Carley found a computer with a KCS label running an unauthorized program called Kali Linux—commonly used by hackers to gain access to networks—hidden behind a copier. It was running a brute force attack on the network, attempting to gain access. Carley identified who placed it through video surveillance.
There was no county administrator at the time, so Carley informed HR/Risk Manager Molly Strohm, the Sheriff’s Department, and Central Dispatch about the device. Strohm told Carley the device was authorized by the Marquette County Board of Commissioners, which wanted the device plugged back in. That violated the terms of the pending state audit.
On August 18, new County Administrator Duane DuRay placed Carley on administrative leave due to alleged delays in obtaining KCS’s credentials to access the county’s network and not fixing a wireless video issue for the county board chair’s office. DuRay told Carley to give KCS employees all passwords to access the county’s network, including for firewalls. As it was against county and Law Enforcement Information Network policies, Carley refused.
Carley told DuRay and Strohm that if KCS were improperly provided access to the network, the county could lose its right to access LEIN and data and other data from 911/emergency services.
The county then offered Carley a separation agreement with a severance package equal to a month’s pay and benefits in exchange for Carley waiving and releasing all claims against the county related to his employment and separation. He refused.
Carley is suing his job back, back wages, and damages for emotional distress, mental anguish, humiliation, and damage to his professional reputation.
