City of Columbus, Ohio
bd_a6d1d5c325083174 · schema v1 · pii pii-v1
Full breach record for City of Columbus, Ohio →The City of Columbus experienced a cybersecurity incident on July 18, 2024, involving a foreign cyber threat actor attempting to deploy ransomware. The actor gained unauthorized access to IT infrastructure, viewing sensitive personal information including names, DOBs, SSNs, driver's licenses, and bank account details. The City severed connectivity, engaged forensic experts, and notified law enforcement. Notices were sent to Montana residents on September 11, 2024, offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 18, 2024
Discovered
Sep 5, 2024
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Siterhysidabd_1840a5188defe0682024-07-31 · +36dVerified by operator
- Leak Siterhysidabd_c07df1e00674c1622024-07-18 · +49dVerified
Regulatory filings (3) · sorted by filing gap
- Indiana State AGbd_311cc9cd07f61dfb2024-10-07 · +32dVerified
- Maine State AGbd_ab0fca3ff7bb9fa02024-11-01 · +57dVerified
- Massachusetts State AGbd_cd6c46bfac4a64292024-11-01 · +57dVerified by operator
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Sep 5 (MT), last Nov 1 (MA) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.