I ran across this initially yesterday and wanted to look more into it before I posted it about it. All I can say is YIKES either Columbus, Ohio are the biggest idiots in the world or they are so full of themselves they cannot admit being wrong. Honestly, it is probably at least a little bit of both as the story is beyond bizarre.
For those who have not heard about this in July the city of Columbus suffered from a cyberattack and Columbus Mayor Andrew Ginther said on August 13 that a “breakthrough” in the investigation and most if not all the data stolen was either encrypted or corrupted and thus unusable. However, when a resident of the city whose job is monitoring the dark web, Connor Goodwolf, went poking around he quickly realized that this was not the fact at all. It wasn't a typical attack as multiple databases were hacked, data went back to 1999, and sensitive information about both minors and domestic abuse victims was all in there.
The amount of data stolen was enormous and something that the city did not tell people and so Goodwolf tried to contact the city multiple times to let them know what he had found and how big of an issue this was to no avail. It shouldn't be a surprise then that since the city would not talk with him or change their tune he went to local media and showed them. So the city ended up getting embarrassed as they had to change their tune but where they went off the rails was that they launched a lawsuit AGAINST him and went to the courts silencing him.
All of this was done under the guise of holding him responsible for sharing sensitive data but ummm he didn't steal it and if he found it other people could as well. By raising the alarm and getting this attack the attention it requires he has essentially been held responsible for the PUBLIC finding out by the city. Already we have seen cybersecurity experts from across the world speak out against this because of how absurd it is and how he should be commended and rewarded rather than sued and silenced that is what we see from autocratic governments, not democratic ones.
Not to mention what type of impact this will have in the future for white hackers and others who poke and prod security systems used to protect data across the US. The effect is extremely chilling as people who do the right thing are now being silenced and shamed even though they did not do anything wrong. This guy didn't hack or steal and even though he downloaded some of it how else was he supposed to show anyone what had been leaked?! This was what was required but the city government seems to have been to upset they have been caught misleading their citizens that they are just trying to squash him instead of championing his actions and his discovery.