DisclosureLens
MalwareGovernmentGovernmentRansomwareStolen CredentialsData ExfiltratedData PublishedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainPIIIdentity (basic)LowActive

City Of Columbus

bd_c3229be5e89157e6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 18, 2024

Filed

Nov 1, 2024

To disclose

15 weeks

Affected

19state residents only

Linked

2 filings

Confidence

67%
Full breach record for City Of Columbus

The City of Columbus, OH, reported a cybersecurity incident discovered on July 18, 2024, involving a foreign threat actor attempting to deploy ransomware and solicit payment. The actor gained unauthorized access to IT infrastructure, potentially exposing PII of residents, employees, and visitors. Data was posted on the dark web. 19 New Hampshire residents were identified as affected. The City engaged legal counsel, forensic experts, and law enforcement, and offered credit monitoring.

Incident timeline

discovery → filing · 15 weeks / 106 days

Jul 18, 2024

Discovered

Nov 1, 2024

Filed

vs. sector median

+4 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AG+14d · this page

Pattern: first filing Oct 18 (SC), last Nov 1 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.