COLUMBUS, Ohio (WCMH) — Nearly two years after a massive ransomware attack hit the City of Columbus, the director of the Department of Technology is retiring.
NBC4 Investigates uncovered that thousands of people were impacted by the city’s data breach after the mayor initially said the data had no value.
Sam Orth led the department during the ransomware attack. City council honored Orth on Monday as he announced his retirement.
Over 100 animals seized in Muskingum County investigation
“Director Orth originally joined Mayor Ginther’s administration in July 2016, bringing decades of experience in information technology, government operations, education technology and private sector innovation,” Columbus City Councilmember Nick Bankston said.
Council mentioned the ransomware attack briefly, thanking Orth for staying calm and collected. The city has said a breach report will be released that outlines how this attack happened, but still has not said when that report will be made public.
Bankston sent NBC4 a statement reading: “Director Orth has led our city’s technology efforts with a cool head and a steady hand — from major modernization initiatives to guiding us through the shift to remote work during the pandemic. He’s leaving big shoes to fill, but I know he’s leaving the department in great hands. I wish him all the best in retirement — more travel, more family time, and well-earned rest.
As for the cyberattack report, our office remains committed to holding a hearing once that report comes from the Administration.”
Orth was hired in July 2016 with a salary of more than $150,000 per year. According to the Buckeye Institute, his pay grew to nearly $190,000 by 2022.
“There’s highs and lows, successes and setbacks. But there’s one constant that drives value in information technology. It’s always been about the people. Over the course of my career, I’ve learned that technology changes constantly but leadership, teamwork, integrity, trust, and commitment to service endure,” Orth said.
Orth has not given NBC4 an interview since the cyber attack.
NBC4 Investigates also requested emails and text messages sent in the days after the attack. Nearly two years later, those records have not been provided.
The last update provided in May said 2,326 records were still under review. The outside law firm reviewing those records is being paid with tax dollars.
A spokesperson for the mayor’s office sent a statement reading: “Today is Director Orth’s last day in the office. Beginning tomorrow, June 27th, Pam O’Grady will serve as the Interim Director/CIO. Director Orth will continue to work with the city in an advisory capacity until the end of the year, supporting projects that will help Columbus continue to facilitate the city’s technology needs, implement new systems and counter cybersecurity risks.
Current legislation as well as active litigation related to the 2024 cyberattack limits what can be discussed; however, I can confirm the City has made significant investments in a next-generation network security architecture based on a ‘zero-trust’ model.
Some protections that will come out of that $23 million investment are improvements to real-time threat detection and the segmentation of the network, which diminishes the risk of a cyberattack spreading across multiple departments.”
City council says it still plans to hold a public hearing once the breach report is released.
NBC4 will share when that report is made public and when the city finally releases the requested records.
Copyright 2026 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
For the latest news, weather, sports, and streaming video, head to NBC4 WCMH-TV.
Click Here For The Original Source.
