Columbus says ransomware gang stole personal data of 500,000 Ohio residents

Date:

Share post:


The City of Columbus, Ohio’s state capital, has confirmed that hackers stole the personal data of 500,000 residents during a July ransomware attack. 

In a filing with Maine’s attorney general, Columbus confirmed that a “foreign cyber threat actor” compromised its network to access information including residents’ names, dates of birth, addresses, identification documents, Social Security numbers, and bank account details. 

The city, which is the most populous in Ohio with approximately 900,000 residents, says around half a million individuals were affected, though it has not confirmed the exact number of victims. 

The regulatory filing comes after Columbus was the target of a ransomware attack on July 18 of this year, which the city claimed to have “thwarted” by disconnecting its network from the internet. 

Rhysida, the ransomware gang responsible for last year’s British Library cyberattack, claimed responsibility for the attack against Columbus in August. At the time, the gang said it had stolen 6.5 terabytes of data from the city in Ohio including “databases, internal logins and passwords of employees, a full dump of servers with emergency services applications of the city and … access from city video cameras,” according to local news reports.

Rhysida asked for 30 bitcoin, around $1.9 million at the time of the cyberattack, as payment for the stolen data. 

Two weeks after the cyberattack, Columbus mayor Andrew Ginther told the public the stolen data was likely “corrupted” and “unusable.”

The accuracy of Ginther’s statement was thrown into doubt the following day after David Leroy Ross, a cybersecurity researcher also known as Connor Goodwolf, revealed that the personal information of hundreds of thousands of Columbus residents had been listed on the dark web.

In September, Columbus sued Ross, alleging that was “threatening to share the City’s stolen data with third parties who would otherwise have no readily available means by which to obtain the City’s stolen data.” A judge filed a temporary restraining order against Ross, preventing him from accessing the stolen data. 

In a listing on its leak site, seen by TechCrunch on Monday, Rhysida claims to have uploaded 3.1 terabytes of “unsold” data stolen from Columbus, amounting to more than 250,000 files. 



Source link

Lisa Holden
Lisa Holden
Lisa Holden is a news writer for LinkDaddy News. She writes health, sport, tech, and more. Some of her favorite topics include the latest trends in fitness and wellness, the best ways to use technology to improve your life, and the latest developments in medical research.

Recent posts

Related articles

Coatue is raising $1B for AI bets

Coatue Management, a hedge fund that invested heavily in tech startups during the pandemic-infused boom, is raising...

Meta’s former hardware lead for Orion is joining OpenAI

Meta’s former head of augmented reality glasses announced on Monday she is joining OpenAI to lead robotics...

Datadog challenger Dash0 aims to dash observability bill shock

The end of zero-interest rates has driven companies to look for savings wherever they can, but one...

Bowery Farming is ceasing operations

Agtech unicorn Bowery Farming is shutting down, according to PitchBook, which cited internal documents and multiple company...

Apple users can soon upgrade to ChatGPT Plus within the Settings app

Apple products are getting an integration with OpenAI’s ChatGPT in December when iOS 18.2 rolls out, which...

Bluesky gears up for Election Day as X goes pro-Trump

As Election Day in the U.S. nears, social networking startup Bluesky, now flush with new capital, hopes...

Amazon brings generative AI-powered recaps to Prime Video

Instead of scouring the internet for a summary of a TV show, which often risks unintentionally revealing...

Amazon acknowledges screen issues on a ‘small number’ of Kindle Colorsoft units

After more than a decade of waiting, Amazon’s first color Kindle has stumbled out of the gate....