Columbus City Attorney Zach Klein's office has reached an agreement with cybersecurity expert David L. Ross Jr. that prevents Ross from discussing specific information he found after a city-wide data hack in July.
The city is also dismissing its civil lawsuit in the matter.
The permanent injunction keeps Ross from discussing personal identifiable information including Social Security, driver's license and credit card numbers, back account information and personal medical information.
Ross, a Columbus resident who also goes by Connor Goodwolf, talked to media outlets about what he found on the dark web after the July ransomware attack on the city that revealed personal information on city employees, residents, crime victims and others.
In a statement, Klein said, "While I remain concerned about anyone having access to this sensitive data, conversations with Mr. Ross have been positive, and all parties have agreed to move forward with an agreement that continues to prevent the dissemination of information, such as confidential law enforcement records, while protecting free speech."
Ross said his overall goal was to get the case dismissed. However, he wanted to be able to speak with city officials about the hack and exposed information.
"My other goal is for the city to have a method available to talk with a person who can manage reports involving sensitive information, as I made several attempts only to be told "the mayor's office and DOT (Department of Technology) is handling the hack" and having my reporting fall to deaf ears," Ross said.
Klein's office and Ross reached an agreement on a preliminary injunction on Sept. 11 after a judge granted a temporary restraining order on Aug. 29 following the city's suit, which was filed on the same day.
Ross said he spoke out about the exposed data on the dark web was to inform the public.
"From the beginning, my goal has been to inform the public and ensure everyone’s safety," he said. "I firmly believe individuals impacted by a cybersecurity incident should be informed immediately, rather than waiting months, to know if their personal information has been leaked to the dark web""
The city has offered free credit monitoring to all city residents and other impacted individuals following the attack.