City sues dark web researcher over ransomware warning in Columbus

TLDR:

• Columbus, Ohio experienced a major cyberattack by the Rhysida Group, suspected to be linked to Russia.
• Dark web expert Connor Goodwolf warned the city of a deeper breach than reported, leading to a lawsuit against him.

Columbus, Ohio was hit by a ransomware attack believed to be orchestrated by the Rhysida Group, possibly linked to Russia. Dark web expert Connor Goodwolf discovered the breach was more extensive than reported by the city, leading to a lawsuit against him. Goodwolf accessed over three terabytes of hacked data, including sensitive information like arrest records, affecting domestic violence victims and minors. Despite warning the city, Goodwolf was met with silence and subsequently shared the information with the media. The city sued him for disseminating stolen data, causing concerns about silencing cybersecurity researchers. Legal experts and cybersecurity professionals criticized Columbus’s response and warned of a chilling effect on data breach disclosures. The city’s lawsuit against Goodwolf is ongoing, with residents filing a class-action lawsuit and potential repercussions on Columbus’s tech sector reputation.