Ohio Auditor's Office Shuts Down Web Server After Cyberattack

The Ohio Auditor's Office removed its web server and online accounts from the internet following a cyberattack that occurred Sunday. In a statement released Tuesday, Auditor Keith Faber said the digital infrastructure was targeted by overseas cybercriminals and potentially foreign state actors.

Faber stated that his office took the systems offline to allow internal and external experts to scrutinize the threat activity. The auditor described the move as a precautionary measure while the team assesses the scope of the incident.

The office notified state and federal law enforcement immediately after detecting the intrusion. Faber said his team is working closely with those agencies to identify the cybercriminals responsible for the breach.

Faber said the attack was not ransomware and that the office retains all data it held before the incident. He added that there is no evidence the personal financial information of Ohio residents is at risk. The auditor also said the office has no reason to believe the financial data of the government entities it audits, including cities, villages, and school districts, is compromised.

The auditor's office will build a temporary web platform to maintain communication with the public and government organizations until the permanent server is restored. Faber said he has instructed his team to protect the data, determine the full extent of the attack, and cooperate fully with law enforcement partners.

The auditor promised to provide more details to the public as the investigation proceeds. The office will share new information when the team has a clearer understanding of the event.