Satellite TV giant Dish Network finally admitted that the recent outage was caused by a ransomware attack.
The American satellite broadcast provider went offline on February 24, 2023, the outage impacted Dish.com, Dish Anywhere app, and many other services owned by the company.
The company initially did not comment on rumors of a ransomware attack, but now it has confirmed the incident and disclosed a data breach.
According to a Form 8-K filed by the company with US Securities and Exchange Commission (SEC), the Corporation has determined that the outage was due to a ransomware attack.
The company immediately launched an investigation into the incident, which is still ongoing, and notified law enforcement authorities.
“On February 23, 2023, DISH Network Corporation (the “Corporation”) announced on its earnings call that the Corporation had experienced a network outage that affected internal servers and IT telephony. The Corporation immediately activated its incident response and business continuity plans designed to contain, assess and remediate the situation. The services of cyber-security experts and outside advisors were retained to assist in the evaluation of the situation. The Corporation has determined that the outage was due to a cyber-security incident and notified appropriate law enforcement authorities.” reads the Form 8-K. “On February 27, 2023, the Corporation became aware that certain data was extracted from the Corporation’s IT systems as part of this incident. It is possible the investigation will reveal that the extracted data includes personal information.”
At the time of this writing the company has yes to disclose the family of ransomware that infected its infrastructure.
According to BleepingComputer, the company was a victim of the Black Basta ransomware operation.
The threat actors initially compromised the company’s Windows domain controllers and then encrypted the VMware ESXi servers and backups.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, Dish)
Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…
A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…
A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…
Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code…
Google says nation-state actors used Gemini AI for reconnaissance and attack support in cyber operations.…
This website uses cookies.
