Breach of legendary Chicago radio station exposes financial data, contracts, hackers claim
WFMT, a well-known Chicago-based radio station, was allegedly breached by a hacker group. The attackers claim they’ve taken a trove of sensitive personal and business information.
Image by Cybernews.
WFMT, a well-known Chicago-based radio station, was allegedly breached by a hacker group. The attackers claim they’ve taken a trove of sensitive personal and business information.
The classical music radio station was posted on Play ransomware‘s dark web blog, which the cyber cartel uses to showcase its latest victims. In an attempt to coax the victim to meet ransom demands, the gang claims to have released part of the supposedly stolen data.
We have reached out to WFMT and will update the article once we receive a reply.
The Cybernews research team investigated the 5.5GB data dump, concluding that the information attackers shared includes:
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
- Payrolls
- Medical insurance details
- Company budgets
- Government grants
- Various contracts and reports
At least in theory, attackers could utilize the leaked information for identity theft. Attackers especially crave medical insurance details as they can sell them on the dark web for individuals looking for ways to get fraudulent claims for prescription drugs.
Established in 1948, WMFT is one of the longest-running classical music stations in the US. It was one of the first radio superstations delivered via satellite and cable systems across the US and other countries worldwide. WFMT is the only individual station that’s a member of the European Broadcasting Union (EBU).
Meanwhile, Play ransomware is a major player in the cybercrime underworld, elbowing its way into the top three of the most active ransomware cartels in 2024.
In 2023, Play was behind the attack against the Palo Alto County Sheriff's office in Iowa and the Donald W. Wyatt maximum security detention center in Rhode Island.
According to an Adlumin profile, Play is thought to be one of the first ransomware groups to use intermittent encryption, in which only certain fixed segments of a system are encrypted.
The method allows for faster access and exfiltration of a victim's data, and it seems other notorious groups have since adopted the tactic, including ALPHV/BlackCat, DarkBit, and BianLian.
