Sun Sep 15 13:28:00 UTC 2024: ## Columbus City Faces Backlash After Suing Cybersecurity Researcher

**Columbus, Ohio** – The city of Columbus is facing criticism after filing a lawsuit against a cybersecurity researcher who discovered a massive data breach and alerted the city about the severity of the situation.

Connor Goodwolf, an IT consultant who monitors the dark web, discovered that the city’s hack, attributed to the Rhysida ransomware group, had exposed far more sensitive information than initially reported by the city. Goodwolf found personal identifiable information, protected health information, social security numbers, and even arrest records, some dating back to 1999.

Despite attempting to contact the city multiple times, Goodwolf claims he was ignored. He eventually shared his findings with local media, prompting the city to file a lawsuit and temporary restraining order against him. The city argued it was necessary to prevent the dissemination of sensitive data, including information about undercover police officers.

This action, however, has sparked controversy among cybersecurity experts and legal scholars. They argue that the city’s actions could stifle future research and discourage others from reporting similar breaches.

“This can’t possibly be an appropriate use of the courts,” stated Kyle Hanslovan, CEO of cybersecurity company Huntress. “In this case, it appears we have just silenced someone who, as far as I can tell, appears to be a security researcher who did the bare minimum and confirmed the official statements made were not true.”

While the city has offered two years of free credit monitoring to affected residents and is working with Legal Aid to provide additional support for domestic violence victims, the lawsuit has cast a shadow over the city’s response to the breach.

Some residents have filed a class-action lawsuit against the city, and cybersecurity experts warn that the city’s actions could discourage future research and discourage others from reporting breaches.

“I am hoping the city realizes the mistake of filing a civil suit,” said Goodwolf, noting that the city’s reputation as a tech hub could be negatively impacted.

This case highlights the complex legal landscape surrounding cybersecurity and the delicate balance between protecting sensitive information and encouraging transparency.

Read More