Ransomware group auctioning stolen Columbus government data on dark web for $1.9 million

After weeks of speculation that Columbus has been the victim of a cyberattack (platforms have been down on the The City of Columbus’ website, and some government email addresses haven’t worked since July 18), the City of Columbus and Mayor Ginther have officially confirmed that a foreign cyber threat actor attempted to disrupt the entire city’s IT infrastructure in effort to deploy ransomware, and to then further solicit a ransom payment from the city.

The City’s press release states that the Department of Technology was able to identify the threat and “took action to significantly limit potential exposure.”

However, 6.5 terabytes of databases, internal logins, employee passwords, access to city video cameras, and even data from emergency services records are now posted on the dark web for sale.

BROUGHT TO YOU BY

Rhysida, a ransomware group responsible for 12 other government cyberattacks across the globe, has claimed responsibility for the attack on the City of Columbus. They’re asking for a starting bid of 30 bitcoin or $1.9 million for access to all of this data. 

“The City of Columbus was the victim of a crime committed by an established, sophisticated threat actor operating overseas. I’m grateful for the swift and bold action of our Department of Technology, the FBI and Homeland Security to protect our IT systems, our residents and our employees,” said Mayor Andrew J. Ginther in a press release. “We continue to focus on restoring city services. We appreciate the grace our residents have offered us and the dedication of our employees working to keep our city running. We will support a thorough investigation and help to educate other cities on how they can avoid falling victim to similar attacks.”

Want to read more? Check out our print publications, (614) Magazine and Stock & Barrel. Learn where you can find free copies of our newest issues here!

BROUGHT TO YOU BY