In August 2024 Mayor Andrew Ginther said the data taken from the city was "encrypted or corrupted", and therefore unusable by whoever held it.
It is the kind of statement organisations make in the first weeks: reassuring, technical-sounding, and offered before the review that would establish it has finished.
The Two Words Do Different Work
Encrypted, in this context, would mean the city had encrypted its own data at rest, so what the attacker took is ciphertext without a key. That is a real defence and a genuinely good outcome.
Corrupted means the exfiltration was incomplete or damaged — an accident of the attacker’s process, not a control. Presenting the two as interchangeable makes an accident sound like a defence.
It Was Checkable, Which Is What Made It Dangerous
Most reassurance in this database is unfalsifiable from outside: an organisation says it has "no evidence of misuse" and nobody can test that. This claim was different. The data was published; anybody could open it.
Somebody did, and it was not encrypted. That sequence is filed at 24-0829.
The Corpus Keeps Finding This Shape And It Is Not Usually Punished
Early reassurance that turns out to be wrong is common. It rarely has consequences, because by the time the correction arrives the coverage has moved on and nobody re-reads the first statement.
This desk records the initial claim alongside the correction for exactly that reason. A file that only carried the final position would leave the reader with an accurate account of the data and no account at all of what the organisation said about it.
Based on contemporaneous reporting of the mayor’s public statements, listed below. Graded high: the statement was made publicly and widely reported. The distinction drawn between "encrypted" and "corrupted" is this desk’s analysis of what the two words would each imply, not a characterisation of what the city meant. Corrections: corrections@forensicpost.com.