Cyberattack puts Columbus residents' data at risk
Add Axios as your preferred source to
see more of our stories on Google.
Illustration: Sarah Grillo/Axios
Thousands of Columbus residents have reportedly had their personal data compromised as a result of foreign hackers hitting the city's servers with ransomware last month.
Why it matters: The stolen personal information — including driver's license and social security numbers, birth dates, addresses, and names of domestic violence victims — could lead to identity theft and other safety concerns, WCMH-TV reports.
Catch up quick: The city severed its internet connection July 18, disrupting services like 311 and email, after learning an employee downloaded a file containing the malicious software.
- The group that claimed responsibility for the cyberattack, Rhysida, demanded a ransom to prevent the data from being leaked, according to news reports.
- The FBI and Homeland Security assisted with an investigation, and officials had provided only brief public updates until this week.
- That was intentional, Ginther said at a news conference Tuesday, to avoid antagonizing the hackers. But a majority of the information hackers had was "unusable" because it was corrupted or encrypted, he claimed.
Reality check: Soon after, a local cybersecurity expert whose data was compromised told local media that the breach did expose individuals' identifying information and will provide evidence to a law firm handling the case.
- Besides public employees, the data of anybody who used an ID scanning system to enter City Hall could be at risk, per WCMH-TV.
What they're saying: "We are pursuing this information with the foremost concern of protecting and serving Columbus residents," Ginther said in a statement Wednesday. "We are actively evaluating additional resources to support the public and the city. As we continue to investigate, we will act on and share verifiable information."
- A city spokesperson told Axios she couldn't comment further because the city is "still investigating and verifying all of the incoming information."
What we're watching: Two Columbus police officers, one who works undercover, filed a class action lawsuit against the city last week, alleging their personal data was compromised.
- The Fraternal Order of Police told WBNS-TV several officers were the victims of bank and attempted loan fraud.
- The city is offering credit monitoring services to current and former employees.
Threat level: Attacks like Columbus' are a growing concern. A Center for Internet Security report found that malware attacks on state and local governments more than doubled between 2022-2023.
Pro tip: The Federal Trade Commission has tips on how to monitor your accounts and protect yourself if you suspect your data has been exposed.