Sinclair Broadcast Group says it suffered a ransomware attack and has had data stolen

Oct 18, 2021

Sinclair Broadcast Group, which operates dozens of TV stations across the U.S., said Monday that some of its servers and work stations were encrypted with ransomware and that some of its data was stolen from the company's network.

The company said it started investigating the potential security incident on Saturday and on Sunday it and found that certain office and operational networks were disrupted.

The Hunt Valley, Maryland-based company owns and/or operates 21 regional sports network and owns, operates and/or provides services to 185 television stations in 86 markets.

The broadcast group, which is known for pushing a conservative viewpoint through editorials and reports that it compels its stations to run, did not immediately say how many TV stations were directly affected.

Nashville, Tennessee's WZTV put out a notice on its website Monday about "serious technical issues" at the TV station affecting its ability to stream content.

"We are also currently unable to access our email and your phone calls to the station," it said.

Sinclair said it's taken measures to contain the incident and that its forensic investigation is ongoing. However, the company said that the data breach has caused – and may continue to cause – disruption to parts of its business, including certain aspects of local advertisements by local broadcast stations on behalf of its customers. The company said that it is working diligently to restore operations quickly and securely.

Sinclair said it currently can't determine whether or not the data breach will have a material impact on its business, operations or financial results.

No ransomware groups immediately took credit for the incident.

Ransomware attacks, in which cyber criminals encrypt an organization's data and then demand payment to unscramble it, are a growing scourge in the United States . The Biden administration has pledged to disrupt and prosecute criminal networks like the one that attacked a major U.S. pipeline company in May. The attack on Colonial Pipeline, which led to gas shortages along the East Coast, was attributed to a Russia-based gang of cybercriminals.

Ransomware payments reached more than $400 million globally in 2020 and topped $81 million in the first quarter of 2021, according to the U.S. government.

Several media outlets have been hit by ransomware attacks in recent years. Cox Media Group, a major media conglomerate, said recently it was the target of a ransomware attack earlier this year. And a ransomware attack briefly knocked the Weather Channel off air in 2019.

Sinclair shares declined about 3.3% in afternoon trading.

Copyright 2021 NPR. To see more, visit https://www.npr.org.