Columbus, Ohio, Cyberattack Affects 500,000 Residents

The City of Columbus, Ohio, experienced a ransomware attack on July 18, 2024, which resulted in the theft of sensitive personal data from approximately 500,000 residents. The Rhysida ransomware gang claimed responsibility, alleging that they stole 6.5 terabytes of data, including names, addresses, Social Security numbers, and bank account information. Despite city officials initially asserting that the stolen data was corrupted and unusable, a cybersecurity researcher revealed that unencrypted personal information was available on the dark web. The city subsequently filed a lawsuit against the researcher for disseminating stolen data. Columbus is now providing affected individuals with 24 months of free credit monitoring services as a precaution. The incident has drawn significant scrutiny due to the city's handling of the breach and its attempts to control information release.