City of Columbus sues man after he discloses severity of ransomware attack
Columbus has sued researcher David Leroy Ross for revealing sensitive data from a ransomware attack by the Rhysida group, claiming his actions threaten public safety and ongoing investigations.
Read original article
The city of Columbus has filed a lawsuit against security researcher David Leroy Ross, who disclosed the extent of a ransomware attack that compromised sensitive data. The attack, attributed to the Rhysida group, occurred on July 18, resulting in the theft of 6.5 terabytes of data. Columbus Mayor Andrew Ginther initially claimed that the stolen data was unusable due to encryption or corruption. However, Ross provided evidence contradicting this assertion, showing that the data was intact and included sensitive information about city employees and residents. The city’s lawsuit alleges that Ross's actions constituted criminal acts, invasion of privacy, and negligence, claiming he interacted with the dark web to download and disseminate stolen data. A Franklin County judge granted a temporary restraining order against Ross, prohibiting him from accessing or sharing any city files posted online. Columbus City Attorney Zach Klein emphasized that the lawsuit is not about free speech but rather about protecting public safety and the integrity of ongoing investigations. The city argues that Ross's actions have endangered individuals' safety by revealing confidential information. Despite the restraining order, the sensitive data remains accessible on the dark web.
- Columbus sues researcher David Leroy Ross for disclosing sensitive data from a ransomware attack.
- The attack involved the theft of 6.5 terabytes of data by the Rhysida group.
- Mayor Ginther initially claimed the data was unusable, but Ross provided evidence to the contrary.
- A judge issued a temporary restraining order against Ross, limiting his access to the data.
- The city argues that Ross's actions threaten public safety and ongoing investigations.
Related
2.9B hit in one of largest data breaches; full names and SSNs exposed
A data breach has exposed personal information of 2.9 billion individuals, linked to National Public Data and hackers. A lawsuit seeks compensation and secure disposal of the stolen data.
Background check company breached, nearly 3B exposed in data theft
A data breach at National Public Data affected nearly 3 billion individuals, exposing sensitive information. The hacker group USDoD demanded $3.5 million for the compromised database, raising privacy concerns.
Hackers leak 2.7B data records with Social Security numbers
Hackers leaked about 2.7 billion records of personal information from National Public Data, prompting class action lawsuits and warnings for individuals to monitor credit reports and avoid phishing attempts.
Ransomware attack closed L.A. courts for days. Public deserves a full accounting
In July 2024, a ransomware attack forced the Los Angeles Superior Court to close for two days, disrupting critical functions and prompting an ongoing criminal investigation into the incident.
Judge grants restraining order against cybersecurity expert
A Franklin County judge issued a restraining order against Connor Goodwolf for disclosing details of a Columbus cyberattack, which the city claims threatens public safety and ongoing investigations.
1 commentsRelated
2.9B hit in one of largest data breaches; full names and SSNs exposed
A data breach has exposed personal information of 2.9 billion individuals, linked to National Public Data and hackers. A lawsuit seeks compensation and secure disposal of the stolen data.
Background check company breached, nearly 3B exposed in data theft
A data breach at National Public Data affected nearly 3 billion individuals, exposing sensitive information. The hacker group USDoD demanded $3.5 million for the compromised database, raising privacy concerns.
Hackers leak 2.7B data records with Social Security numbers
Hackers leaked about 2.7 billion records of personal information from National Public Data, prompting class action lawsuits and warnings for individuals to monitor credit reports and avoid phishing attempts.
Ransomware attack closed L.A. courts for days. Public deserves a full accounting
In July 2024, a ransomware attack forced the Los Angeles Superior Court to close for two days, disrupting critical functions and prompting an ongoing criminal investigation into the incident.
Judge grants restraining order against cybersecurity expert
A Franklin County judge issued a restraining order against Connor Goodwolf for disclosing details of a Columbus cyberattack, which the city claims threatens public safety and ongoing investigations.