September 3rd, 2024

City of Columbus sues man after he discloses severity of ransomware attack

Columbus has sued researcher David Leroy Ross for revealing details of a ransomware attack, claiming he contradicted their assertion about unusable stolen data, which remains accessible on the dark web.

Read original articleLink Icon
City of Columbus sues man after he discloses severity of ransomware attack

The City of Columbus has filed a lawsuit against security researcher David Leroy Ross, who disclosed the extent of a ransomware attack that occurred on July 18, 2024. The attack, attributed to the Rhysida group, resulted in the theft of 6.5 terabytes of sensitive data, which the city initially claimed was unusable. However, Ross provided evidence contradicting this assertion, showing that the data was intact and included sensitive information about city employees and residents. Following Ross's disclosures to the media, the city sought a temporary restraining order to prevent him from accessing or disseminating the stolen data. Columbus City Attorney Zach Klein emphasized that the lawsuit is aimed at protecting public safety and the integrity of ongoing investigations, rather than infringing on free speech. The restraining order was granted without Ross's prior knowledge, and while it restricts him from sharing the data, it does not prevent him from discussing the cyber incident itself. The sensitive data remains accessible on the dark web, raising concerns about its potential misuse.

- Columbus is suing a researcher for revealing the severity of a ransomware attack.

- The city claims the stolen data was unusable, but the researcher provided evidence to the contrary.

- A temporary restraining order has been issued against the researcher to prevent further dissemination of the data.

- The lawsuit aims to protect public safety and the integrity of criminal investigations.

- The sensitive data remains available on the dark web despite the legal actions taken.

Link Icon 1 comments
By @warrenm - 8 months
Yet another example of needing technically-aware/-competent individuals in all levels of government