Rhysida Demands $1.9M from Ohio State Government for Sensitive Exfiltrated Data

August 6, 2024

INCIDENT

The government of Columbus, Ohio shut down a large part of its IT systems for >10 days after ransomware attack. The Rhysida ransomware group claimed the attack and is threatening to leak 6.5 terabytes of exfiltrated information. The data allegedly contains emergency services data, access to city cameras and more.

Government email access has been restored after more than a week of outages. 911 as well as 311 have been able to remain operational throughout the recovery process. The city’s department of technology and outside experts are going through each technology system before they are brought back online.

Rhysida demand ransom of 30 BTC — about $1.9 million.

Incident Date

July 18, 2024

Estimated Cost

$1.9M ransom demand; IT systems shut down

Type of Malware

No Malware identified