Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Bay Village staff report post‑2025 dataset notice but say no current city data exposed
Summary
IT Director Jen Demoloy told the committee that a February 2025 dataset notice partially matched historical IP addresses but EMC confirmed those were not current Bay Village accounts and no current city data were exposed; staff described Microsoft 365 migration, automated backup alerts, and phishing training.
Jen Demoloy reviewed five notable incidents from 2025 and said the most concerning notice—flagged by the Ohio Cyber Integration Center—contained records that partially matched IP addresses once associated with the city. "Upon further review, EMC confirmed that those email addresses were not City of Bay Village addresses...So there was no no disruption in our data. No city data what no current city data was exposed," she said.
Jen also described a June pool phone outage that required a fiber module reset but resulted in no interruption to city data, and she summarized monitoring posture: the city intentionally configures automated alerts to over‑notify so EMC can investigate early. "Every alert in 2025 was reviewed by EMC and closed, and the backup system is operating exactly as intended, to protect the city data," she said.
Staff described other protections: a completed migration from on‑premises Exchange to Microsoft 365 for email resilience, implementation of an M365 backup solution for OneDrive/SharePoint/email, annual vulnerability scanning engagements, and simulated phishing training via NoviCore for employees. Committee members asked for continued reporting of incidents and noted insurance and audit processes were part of the city's cyber posture.
