San Diego mayoral candidate Carl DeMaio and seven other current and former city councilmembers have been subpoenaed to testify in a case involving the security of sensitive city information.
"If I were a San Diego resident, I would feel angry," said attorney Matt Borden.
Borden represents Todd Dominguez, a former account manager for Los Angeles-based En Pointe Technologies.
In 2010, the company was hired by the city of San Diego to set up its IT help desk.
Security concerns over privacy voiced by the City Council prompted assurances from En Pointe that no work would be done offshore.
Dominguez said he was fired for uncovering the truth -- the help desk setup was outsourced to a company in India.
A lawsuit filed alleges En Pointe deceived the city by falsifying invoices and switching name badges.
According to court filings, new evidence appears to show city data was in fact transferred overseas
In the filings, Borden lays out a chain of emails leading to India referring to large data transfers involving the inner workings of the city's computer system.
"If they were sending over this data, we don't know what other data they may have been sending," said Borden.
Borden said that could include anything from personnel files to paperwork filled out by the public.
The search for answers now involves DeMaio and current and former councilmembers, including Todd Gloria and Marti Emerald, who have been subpoenaed to testify about whether they were misled by En Pointe.
So far, there's no evidence any data was hacked.
San Diego Mayor Jerry Sanders' office told 10News the city and police conducted investigations and that the allegations in the suit are not true and that no work was done offshore.
10News contacted several city councilmembers, who declined comment because they've been subpoenaed.
En Pointe was replaced with another vendor earlier this year.
The company didn't return 10News calls.
Copyright Do you have more information about this story? Click here to contact usCopyright 2012 by 10News.com. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.