COLUMBUS, Ohio (WCMH) — With the scope of the data leaked onto the dark web from Columbus’ ransomware attack just beginning to be known, one of the main ways a person can protect themselves is to place a security freeze on their credit report.
Shortly after Mayor Andrew Ginther asserted Tuesday morning that the data leak contained information that was either encrypted or corrupted, a cybersecurity expert contacted NBC4 showing that he had downloaded some of the data. What that expert, Connor Goodwolf, was able to immediately access included city attorney’s records with Social Security numbers and victim’s names, and a city facility entry database that included driver’s license information for visitors going back 20 years.
The discovery took city officials aback, with Ginther saying on Wednesday morning that what he had originally said was done in “good faith” and “upon rigorous investigation.”
“We are now aware that an individual has come forward with information,” Ginther said. “We are pursuing this information with the foremost concern of protecting and serving Columbus residents.”
With the personal information not just of city employees but potentially citizens who’ve interacted with the city publicly available, it’s possible a person with it could open a credit line.
“It’s very scary to have our information out there,” said Ciera Frazier, a Columbus-based credit consultant. “And you don’t know it’s out there. You don’t know who has it. You don’t know what they’re going to do with it, so it’s very scary.”
The official website of the federal government contains instructions on how to place or lift a security freeze on your credit report. It can help protect you from credit fraud. It also means that you can’t open a new line of credit in your name without unfreezing it first. “When you place a security freeze, creditors cannot access your credit report. This will keep them from approving any new credit account in your name, whether it is fraudulent or legitimate,” the website says. The entire process is free.
How to place or lift a freeze on your credit history
Contact each of the three major credit reporting agencies at the following links:
The links contain information on how to make a freeze request online, by phone or by mail.
The agencies require you to prove your identity by submitting certain documents. Those documents may include images of your Social Security card, Medicaid/Medicare card, driver’s license or other government-issued ID, utility bill, pay stub or a canceled check. You can check with each agency to see which information it requires so you can gather it first.
“You go in, you set up an account, and then you add the security freeze,” Frazier said.
Freeze requests made online or by phone must be processed within one business day. Those through mail must be handled within three business days. Requests to lift freezes must be processed within one hour online or by phone, or within three business days by mail.
If you encounter delays or problems placing or lifting a freeze on your credit report, NBC4 wants to know as we work to keep the public informed on the ramifications of the data leak. Follow this link to fill our out contact form for Better Call 4.