Columbus Ransomware Attack Data-Breach Class Action

Victims of a 2024 ransomware attack allege that the City of Columbus failed to protect personally identifiable information collected and stored by the city, resulting in the exposure of sensitive information affecting approximately 500,000 people. After a Franklin County judge dismissed the case on governmental-immunity grounds, the 10th District Court of Appeals ruled that the dismissal was improper and that the class action must proceed; the city may appeal.