City seeks order against cyber expert for revealing hack extent

TLDR:

• City of Columbus granted temporary restraining order against cybersecurity expert David L. Ross Jr., aka “Connor Goodwolf.”
• Ross was informing the media about the impact of a ransomware attack on the city, exposing sensitive information.

Full Article:

The city of Columbus has been granted a temporary restraining order against cybersecurity expert David L. Ross Jr., also known as “Connor Goodwolf”. Ross had been informing the media about the public impact of a ransomware attack on the city government, revealing sensitive information that was hacked from the city and posted online when the city refused to pay the ransom demanded by the attackers.

The city attorney’s office filed a motion for the restraining order, which bars Ross from accessing, downloading, or disseminating any of the stolen files from the city that were posted to the dark web. The judge approved the order without notifying Ross or giving him a chance to defend himself, citing concerns that Ross may further disseminate the confidential stolen data if given the opportunity.

Ross had been revealing personal information about city employees and public citizens, including victims of crimes and confidential details about Columbus police officers. His disclosures prompted lawsuits against the city for failing to protect the plaintiffs’ personal information. The city attorney stated that the restraining order was necessary to protect police, victims, undercover officers, and the public from harm.

Despite the city’s attempt to suppress Ross’s efforts, his investigation has provided more accurate details about the cyberattack’s impact on city employees and the general public than what the city disclosed. The city has taken steps to mitigate the damage exposed by Ross, offering free credit-monitoring services and identity-theft insurance to city residents.

Ross, who plans to seek legal representation, believes that the city is attempting to find a scapegoat for their incompetence in allowing the sensitive information to be stolen. He expressed his intention to file lawsuits against the city, joining police officers and firefighters who are already suing due to the data breach.

The city attorney emphasized that the restraining order was issued to protect public safety and not to silence Ross. The legal battle between the city of Columbus and the cybersecurity expert continues as the city tries to contain the fallout from the cyberattack and prevent further dissemination of the stolen data.