Mayor Ginther shares impact of Columbus data leak as next security steps begin

COLUMBUS, Ohio (WCMH) -- Columbus Mayor Andrew Ginther on Saturday addressed the latest developments on the leak of stolen Columbus data onto the dark web that does include personal information of uncounted people, and not just city employees.

"Ultimately I am the mayor, the buck stops with me and I take responsibility for information that I've shared with the public," said Ginther. On Tuesday, the mayor initially stated the data leaked was unusable and did not have value. Hours later, NBC4 Investigates uncovered the opposite with Mayor Ginther taking responsibility and sharing the breach's impact.

"Let me once again express my anger, my frustration that our city and our residents have been attacked by cyber criminals," said Ginther. "My job is to acknowledge when that information was inaccurate. It was the best information we had at the time. Clearly, we discovered that that was inaccurate information and I have to accept responsibility for that."

A cybersecurity expert approached NBC4 Investigates, showing how he had started to access the leaked data, hours after Ginther had said he was told it was either encrypted or corrupted. On Saturday, the Mayor answered if community members that pay bills or taxes to the city are impacted by the data leak.

"We believe other information is out on the dark web or could potentially be put out on the dark web, including, you know, information like that, said Ginther. "But we cannot necessarily confirm that at this point."

NBC4 Investigates was told by Mayor Ginther it will take "several more months" to get a completed report that would outline how many people are impacted by the leak. Among the databases that was hacked was the city attorney's database that contains private information on suspects, victims, witnesses, and children.

Columbus city attorney Zach Klein's office is working with Legal Aid to provide help to those who may need protective orders now that their information is on the dark web. "I take our work protecting victims very, very seriously," said Klein. "They are the most important people that we protect and I will never waver from that as the city attorney and my team will do everything we can within our power to make sure that you feel protected and that you are protected as a victim of crime."

The city is facing a class action lawsuit over how it handled the ransomware attack. The city attorney's office said it is bringing in outside counsel to prevent a conflict of interest.

Two years of free credit monitoring from Experian for all residents and any impacted individuals of the data leak is being offered by the city. To receive the free credit protection, go to columbus.gov/cyber or call 833-918-5161 with the code B129833.