Kinda like that jackass AG who targeted a journalist for viewing the HTML of a state site and published an article about the PII hard-coded within the web app. Don’t make us look bad!
Columbus Mayor Andrew Ginther said on August 13 that a “breakthrough” in the city’s forensic investigation of the breach found that the sensitive files Rhysida obtained were either encrypted or corrupted, making them “unusable” to the thieves. Ginther went on to say the data’s lack of integrity was likely the reason the ransomware group had been unable to auction off the data.
Shortly after Ginther made his remarks, security researcher David Leroy Ross contacted local news outlets and presented evidence that showed the data Rhysida published was fully intact and contained highly sensitive information regarding city employees and residents. Ross, who uses the alias Connor Goodwolf, presented screenshots and other data that showed the files Rhysida had posted included names from domestic violence cases and Social Security numbers for police officers and crime victims. Some of the data spanned years.
On one hand, having a bad lie exposed weakened their position for the ransom.
On the other, they fucked up three different ways now.
“It’s impossible for them to know anything since it’s corrupted.”
“That’s not true, look I just downloaded it. It even has your name and home address right here.”
“HOLD IT RIGHT THERE, CRIMINAL SCUM! YOU HAVE VIOLATED THE LAW BY DOWNLOADING THAT DATA!”
“I only downloaded it to show that you were lying…”
“THAT IS ALSO WHY WE HATE YOU.”
This effect is to get [Ross] to stop downloading and disclosing stolen criminal records to protect public safety.
Why him specifically? That’s a lot of effort to stop one guy doing what literally anybody with some time and willpower could do? Surely they have bigger problems right now? Fucking pathetic.
Because the real reason is obviously that the city got called out on and caught in a straight up lie, and they’re pissed and seeking revenge.
Barbara? Barbara Streisand? Is that you?
Stupid question: how is ransomware still a thing? Why don’t institutions back up their data yet?
In the early days of ransomware I helped a small business of a friend that was attacked. They got in and waited months, creating garbage backups until they were confident then sprang the trap.
Tbh I was impressed with how thorough they’d been.
