Desk live·
ForensicPost
Breaches/Accountability/File 24-0813

Columbus Mayor Said Stolen Data Was Unusable, and Researchers Checked

Columbus’s mayor told residents the stolen data could not be used. It was a specific, checkable technical assertion, and it was the first thing anybody checked.

Constructed geometry · not a chart of case data
JurisdictionUSAColumbus, Ohiothe affected organisation’s jurisdiction, not the actor’s suspected origin
TargetCity of Columbus
ActorRhysida
S. Rosler12 min readConfidence: high3 sources reviewed

In August 2024 Mayor Andrew Ginther said the data taken from the city was "encrypted or corrupted", and therefore unusable by whoever held it.

It is the kind of statement organisations make in the first weeks: reassuring, technical-sounding, and offered before the review that would establish it has finished.

The Two Words Do Different Work

Encrypted, in this context, would mean the city had encrypted its own data at rest, so what the attacker took is ciphertext without a key. That is a real defence and a genuinely good outcome.

Corrupted means the exfiltration was incomplete or damaged — an accident of the attacker’s process, not a control. Presenting the two as interchangeable makes an accident sound like a defence.

It Was Checkable, Which Is What Made It Dangerous

Most reassurance in this database is unfalsifiable from outside: an organisation says it has "no evidence of misuse" and nobody can test that. This claim was different. The data was published; anybody could open it.

Somebody did, and it was not encrypted. That sequence is filed at 24-0829.

The Corpus Keeps Finding This Shape And It Is Not Usually Punished

Early reassurance that turns out to be wrong is common. It rarely has consequences, because by the time the correction arrives the coverage has moved on and nobody re-reads the first statement.

This desk records the initial claim alongside the correction for exactly that reason. A file that only carried the final position would leave the reader with an accurate account of the data and no account at all of what the organisation said about it.

How we reported this

Based on contemporaneous reporting of the mayor’s public statements, listed below. Graded high: the statement was made publicly and widely reported. The distinction drawn between "encrypted" and "corrupted" is this desk’s analysis of what the two words would each imply, not a characterisation of what the city meant. Corrections: corrections@forensicpost.com.

Sources
  1. Columbus mayor says data stolen by hackers was unusableWOSU Public Media
  2. Columbus sues expert, fueling debate about ransomware attackSecurity Boulevard
  3. Lack of encryption for Columbus’ data would be a significant security oversight, experts sayAOL
S. Rosler
Covers extortion groups and leak-site economics. Verifies our sample sets.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary