Ransomware victim disclosure
← All victimsThe Philadelphia Inquirer
listed as Inquirer · Claimed by Cuba · listed 3 years ago
Status timeline
- Listed
May 23, 2023
- Data leaked
At a glance
- Group
- Cuba
- Status
- Data leaked
- Country
- United States
- Sector
- Media & Entertainment
- Listed on leak site
- May 23, 2023
About the victim
AI dossier — public-source company profileThe Philadelphia Inquirer, PBC is a locally owned news organization headquartered in Philadelphia, Pennsylvania, that has been publishing since 1829. It provides local and regional journalism covering news, sports, politics, business, and entertainment for the Philadelphia metropolitan area. The organization operates both a print newspaper and a digital subscription platform at inquirer.com.
- Industry
- News Media & Publishing
- Address
- 801 Market Street, Philadelphia, PA 19107, United States
- Employees
- 501-1000
- Founded
- 1829
Attack summary
Severity: high — Data has been confirmed as published by the Cuba group against a major regional news organization, indicating successful exfiltration of business data. While specific data categories are not detailed in the post, a data_published status from a known ransomware operator against a media company of this scale constitutes significant business data exposure.The Cuba ransomware group claims an attack on The Philadelphia Inquirer and has published data, suggesting exfiltration of company data; the disclosed status indicates data has been published though no ransom amount or specific data volume was stated in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Internal company documents
- Employee records
- Business financial data
What the group claims
About The Philadelphia Inquirer, PBCSince 1829, The Philadelphia Inquirer has been “asking on behalf of the people” of Philadelphia and the region by providing essential journalism. Locally owned and headquartered in...
Sources
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
