Sinclair probes weekend data breach
Data was stolen; ransomware found
Sinclair Broadcast Group, which owns or programs Chattanooga’s ABC, Fox and CW affiliates on WTVC NewsChannel 9, WTVC 9.2, and WFLI-TV, said Monday that some of its servers and work stations were encrypted with ransomware and that some of its data was stolen from the company’s network.
The company said it started investigating the potential security incident Saturday and on Sunday it found certain office and operational networks were disrupted.
The Hunt Valley, Maryland-based company owns and/or operates 21 regional sports network and owns, operates and/or provides services to 185 television stations in 86 markets.
The broadcast group, which is known for pushing a conservative viewpoint through editorials and reports that it compels its stations to run, did not immediately say how many TV stations were directly affected.
Nashville’s WZTV put out a notice on its website Monday about “serious technical issues” at the TV station affecting its ability to stream content.
“We are also currently unable to access our email and your phone calls to the station,” it said.
Sinclair said it’s taken measures to contain the incident and its forensic investigation is ongoing. However, the company said the data breach has caused — and may continue to cause — disruption to parts of its business, including certain aspects of local advertisements by local broadcast stations on behalf of its customers. The company said it is working diligently to restore operations quickly and securely.
Sinclair said it currently can’t determine whether the data breach will have a material effect on its business, operations or financial results.
No ransomware groups immediately took credit for the incident.
Ransomware attacks, in which cyber criminals encrypt an organization’s data and then demand payment to unscramble it, are a growing scourge in the United States. The Biden administration has pledged to disrupt and prosecute criminal networks like the one that attacked a major U.S. pipeline company in May. The attack on Colonial Pipeline, which led to gas shortages along the East Coast, was attributed to a Russia-based gang of cybercriminals.
Ransomware payments reached more than $400 million globally in 2020 and topped $81 million in the first quarter of 2021, according to the U.S. government.
Several media outlets have been hit by ransomware attacks in recent years. Cox Media Group, a major media conglomerate, said recently it was the target of a ransomware attack earlier this year. And a ransomware attack briefly knocked the Weather Channel off air in 2019.