One of the largest US operators of TV stations, Sinclair Broadcast Group, has suffered a ransomware attack that disrupted several news channels over the weekend.
The ransomware managed to encrypt “certain servers and workstations,” which led to the outages, Sinclair Broadcast Group said in a statement on Monday. “Data also was taken from the company’s network,” the broadcaster added. “The company is working to determine what information the data contained and will take other actions as appropriate based on its review.”
The broadcaster first identified the attack on Saturday. The next day, several member stations under Sinclair Broadcast Group reported technical difficulties, which prevented various news channels from going on the air, according to The Record.
In response, Sinclair Broadcast Group notified authorities and contacted a cybersecurity forensics firm to investigate the attack. Meanwhile, Sinclair’s own IT team has been working to contain the threat. Nevertheless, the broadcaster warns the ransomware infection could continue to disrupt IT systems at various TV stations.
There’s a lot of unknowns about the attack. But hackers often launch ransomware attacks by exploiting vulnerabilities in a company’s web software or by phishing unsuspecting employees with a malicious email to gain computer access. The hackers will then install the ransomware on as many computers as possible, encrypting the information inside. To free the systems, a victim is asked to pay up, though it's not recommended that victims hand over any money.
It’s unclear if the hackers have already sent Sinclair Broadcast Group a ransom note demanding payment. A spokesperson for the broadcaster simply told PCMag: “We are working diligently to address the incident and to restore operations quickly and securely.”