COLUMBUS, Ohio — In a press conference Saturday, Columbus Mayor Andrew Ginther and City Attorney Zach Klein confirmed that personally identifiable information was released onto the dark web following a cyber attack last month.
Of particular concern was that one exposed data source was the prosecutor’s database, which includes info on those involved with the justice system such as defendants, victims and witnesses.
“I want to acknowledge how concerned I am,” Ginther said. “I want to reassure the residents of Columbus that we’re taking this very seriously.”
He said they are continuing to work with the FBI, their own cyber security and the city attorney on dealing with the aftermath of an attack from what he called a “highly sophisticated criminal network.”
This announcement comes after—earlier this week—the mayor said that personal information was not dumped on the dark web and that data file screenshots had been the attackers’ “most compelling asset.”
He said they have a team of IT and cyber security experts working to restore the city’s IT infrastructure and to protect it against future attacks.
One thing he kept coming back to was that Columbus was not alone in being targeted for a cyber attack.
“Regrettably, we’re dealing with a problem that’s become increasingly common in today’s world with countless cities, businesses and Americans who have been victims of cyber crimes just like this one,” he said.
The mayor and city attorney also highlighted the city’s notice that they are extending credit monitoring from Experian. Columbus residents and non-residents who shared info with the city/municipal court can sign up for the free, two-year monitoring with Experian here.
Klein said he shared the mayor’s concern and frustration, especially when it comes to the potential exposure of information related to witnesses and victims.
“And while you may need a certain level of expertise to access the dark web—it’s not something you can easily Google—the fact of the matter is that criminals out there may have access to it with their own sophistication,” he said.
He recommended those who feel they may need a civil protection order reach out to The Legal Aid Society of Columbus, those trying to escape an abuser consult with Lutheran Social Services CHOICES and those who feel they are in an imminently dangerous situation call the police.
“It’s fine for (the cyber attackers) to sit in Eastern Europe, or wherever they sit, and pull data, but every field of that data is a person or a loved one in our community,” he said.
The mayor said the investigation could take months to complete. He noted that they’ve invested millions into the city’s cyber security in recent years but that, clearly, they need to do more.
“At this point, I can unfortunately say that we will find that more personal information has been accessed or published by these criminals,” he said. “I understand how frustrating this is for those who have been affected or who are wondering if they were.”
Spectrum News 1 Reporter Aliah Keller contributed to this report.