Ransomware attack hits Sinclair Broadcast Group stations including KHQA

On Saturday, Sinclair Broadcast Group (SBG or Sinclair), the parent company of local CBS/ABC affiliate KHQA, identified and began to investigate what it called “a potential security incident”

On Sunday, SBG officials identified that certain servers and workstations in its environment were encrypted with ransomware, and that certain office and operational networks were disrupted. Data also was taken from the company’s network.

KHQA and other Sinclair affiliates were unable to run local commercial inventory in national programming over the weekend, including inserting them in National Football League broadcasts. The technical issue is ongoing.

Promptly upon detection of the security event, Sinclair senior management was notified and they implemented the company’s incident response plan, took measures to contain the incident, and launched an investigation, which included utilizing a cybersecurity forensic firm and notifying law enforcement and other governmental agencies. The forensic investigation remains ongoing.

Sinclair officials say the company is working to fully restore operations and are working to determine what information the data contained and will take other actions as appropriate.

Sinclair officials say they cannot determine at this time whether or not such event will have a material impact on its business, operations or financial results.