Columbus officials update council on cyber intrusion, authorize CJIS security addendum and move to executive session

City technology officials told Columbus City Council on Feb. 5 that the city has remediated the bulk of systems affected by a recent cyber intrusion but that the investigation is ongoing and requires special legal and security steps to complete.

Director Nasco, the city————————director of technology, said investigators have remediated 94% of affected systems and that 22,173 people had signed up for identity-protection services the city is offering after the breach. He said the city————————has identified approximately four databases that may contain criminal-justice information that would require CJIS certification to review, and that one database tied to the Division of Fire contained protected health information for fewer than 1,000 people.

The update came before council passed Ordinance 0297-2025, which authorizes the city attorney to modify outside counsel and cybersecurity consultant contracts to incorporate an FBI CJIS security addendum and proceed with the certification process. Council then voted to enter executive session to consult with legal counsel about litigation arising from the intrusion.

Why it matters: The…