Columbus Mayor Ginther reflects on cyber-attack and looks ahead to 2025

COLUMBUS, Ohio (WCMH) -- Columbus Mayor Andrew Ginther sits down with NBC4 Investigates to reflect on 2024 and look ahead to the future.

On December 31st, we’re focusing on the ongoing cyber attack investigation and when the city may release more information. NBC4 Investigates was the first to break that hundreds of thousands of people’s private information was leaked on the dark web.

Now, Mayor Ginther says most people who interact with the city should no longer be seeing the impact of the cyber attack. Of course, the information is still on the dark web, but the city systems are mostly back up and running. 

He did share he wants to work with the federal government to create a national cybersecurity strategy and has started those conversations. 

“I had been talking with the Biden administration certainly since our attack. It's going to be a topic at the U.S. Conference of Mayors. There's going to be a section on cybersecurity, trying to continue to raise awareness among mayors and local leaders,” Columbus Mayor Andrew Ginther said. 

The conversations aren’t stopping with the change in administration. 

“The initial conversations I've had with folks in and around the Trump administration have been very positive. They realize the significance and what's at stake,” Ginther said. 

Millions of city dollars have been invested into the recovery from this attack and more will be needed. 

“I anticipate significant investments through our next several capital budgets to get us to where we need with respect to cybersecurity,” Ginther said. 

We are waiting on the breach report, which will show the full extent of what the hackers accessed and how they did it. The city is not sharing a timeline, but when it is released city council plans to hold a public hearing to question the Department of Technology. 

“Are the city's current systems in place enough to show what was accessed besides the data that the ransomware group posted?” NBC4 Investigates Isabel Cleary asked. 

“We just don't know yet, you know, and that's part of what this comprehensive investigation and report will help share,” Ginther answered. 

In August we sat down with the mayor; he shared that the data stolen by the ransomware group was not valuable. Along with whistle-blower Connor Goodwolf, we broke the news that was incorrect. 

The city held a press conference later that week confirming what we first reported. Now the city’s investigation into how this attack happened is ongoing and there is not a timeline for when it might be finished. 

“Is the person or team who originally told you that the data lacked value still employed with the city or still working on this investigation?” NBC4 Investigates Isabel Cleary asked. 

“You know, we're not at liberty to share that at this point based on the investigation that's taking place. But, you know, once that investigation and report is complete, we'll certainly share that,” Ginther said. 

Our full reporting on this cyber attack from the start to where we stand now can be found here.