Media giant News Corp has disclosed new details about a data breach discovered last year and attributed to a state-sponsored threat actor. In January 2022, News Corp revealed that hackers had managed to steal corporate data from its systems, but claimed that financial and customer information were not compromised. The incident was tied to a foreign government, later identified as a Chinese group, and hit News Corp headquarters, news operations in the UK, as well as News Corp-owned businesses such as The Wall Street Journal, Dow Jones, and New York Post.
News Corp last week started sending out data breach notifications to individuals whose data may have been compromised. These notifications revealed that hackers had gained access to a business email and document storage system used by several News Corp businesses between February 2020 and January 2022. Some personal information may have been obtained by attackers, including name, date of birth, Social Security number, passport number, driver’s license number, financial account information, health insurance details, and medical information.
News Corp said that their investigation “does not appear to be focused on exploiting personal information” and that they are not aware of reports of identity theft or fraud in connection with the incident. However, they have decided to offer 24 months of free identity protection and credit monitoring services to impacted individuals.
In conclusion, News Corp has disclosed new details about the data breach that occurred last year, attributed to a Chinese state-sponsored threat actor. The attack managed to obtain some personal information, including name, date of birth, Social Security number, passport number, driver’s license number, financial account information, health insurance details, and medical information. As a result, News Corp is offering 24 months of free identity protection and credit monitoring services to impacted individuals.
Key Points:
• News Corp was the target of a data breach attributed to a Chinese state-sponsored threat actor in early 2022
• Hackers gained access to a business email and document storage system used by several News Corp businesses between February 2020 and January 2022
• Some personal information may have been obtained by attackers, including name, date of birth, Social Security number, passport number, driver’s license number, financial account information, health insurance details, and medical information
• News Corp is offering 24 months of free identity protection and credit monitoring services to impacted individuals