Advertisement
  1. Breaking News

Radio station WMNF victim of ransomware cyberattack

A soundboard at WMNF 88.5 FM. Times (2005)
A soundboard at WMNF 88.5 FM. Times (2005)
Published Jul. 17

Tampa-based community radio station WMNF 88.5-FM is stepping up cybersecurity after its computer systems were hobbled by ransom-seeking hackers last month.

Interim general manager Cindy Reichard said the ordeal began June 18 when a programmer noticed a computer in one of the studios was acting strangely.

The station then received a digital message: Your files have been encrypted. Pay us, and you can have them back.

It's known as a ransomware attack, a common form of cyber crime where hackers install malicious code rendering a victim's data useless until they pay for a digital key to decrypt it.

The station did not pay the ransom, and instead reported the attack to the Florida Department of Law Enforcement.

"FDLE told us that a lot of times you pay and you still don't get your data back anyway," Reichard said.

The hack did not affect any sensitive data, such as donor information, payroll or any financial documents, Reichard said.

RELATED: Rob Lorei reinstated as news director at WMNF after appealing firing

The ransomware did infect a new AudioVault system where the station's audio archives were stored, along with pre-recorded promos played between songs and other audio files. The promos were being recreated on CD, and in the meantime hosts could resort to reading them live.

Archived episodes of the station's news and public affairs programming may be lost permanently.

The station has sent the affected server off to a local data recovery company to see what, if anything, can be salvaged.

The ransomware also took down the station's live HD broadcasts. Those signals have instead been broadcasting pre-recorded shows. Those with radios that display what song is playing may have noticed their screens stuck reading "Derek and the Dominos" when tuning in to WMNF since June.

Otherwise, listeners would not have heard anything unusual, though the attack has caused small difficulties behind the scenes. The lost files include all of the blank forms the station uses for various office purposes.

Reichard was unsure how much money the hackers demanded.

"It depends, because you have to tell them which files you want to get back," she said, but the station ultimately chose not to engage at all.

Reichard said investigators told her the ransomware could have originated in Russia.

"We don't really know for sure, other than it came through the AudioVault," she said. "It could have been sitting in a file for a long time and someone did something that triggered it. Or it could have come in with some music we downloaded."

RELATED: Ransomware attacks put Florida governments on alert

She estimated the situation will cost WMNF $5,000, and possibly more, between the data recovery work and the upgrades to security.

Ransomware in recent years has affected individuals, businesses and municipalities. Major cities such as Baltimore and Atlanta fell victim in 2018. In Florida, Riviera Beach and Lake City were so crippled by recent attacks they paid more than $1 million in combined ransom.

Public radio stations have been targeted. In 2017, San Francisco NPR station KQED was hobbled for months by an attack that forced one of the nation's largest public media companies to shut down its entire computer network to prevent the ransomware from spreading.

An FBI guidance document says the U.S. government "does not encourage paying a ransom to criminal actors," because it could "inadvertently encourage this criminal business model."

Contact Christopher Spata at cspata@tampabay.com or follow @SpataTimes.

ALSO IN THIS SECTION

  1. Javarick Henderson, 13, in green, is led into court for his first appearance Tuesday, Nov. 26, 2019 in Clearwater. Henderson is accused of stabbing his grandmother to death in her home, police said, while another grandchild slept in a nearby room. [CHRIS URSO  |  Times]
    “It’s one of the most gruesome crime scenes that I’ve experienced in a long time,” said Bruce Bartlett, chief assistant state attorney for Pinellas and Pasco counties.
  2. DIRK SHADD   |   Times
The closed sign hangs on the entrance of the tract at Oldsmar BMX, 3120 Tampa Road, in Oldsmar on Friday, May 3, 2019. The world famous BMX track in Oldsmar shut down suddenly earlier this year. The city cited safety concerns after a routine building inspection, and a subsequent report confirmed that serious structural issues in the track's walls exist. [DIRK SHADD  |  Tampa Bay Times]
    The track remains closed indefinitely.
  3. Taniea D. Sherrod, 18, is charged with aggravated battery with a weapon after police say she used a pair of surgical scissors to stab her boyfriend while he was in a hospital bed. [Pinellas County Jail]
    She was charged with aggravated battery with a weapon.
  4. A Pinellas County man caused an auto crash on Park Boulevard Saturday night that caused a boat to go flying off a trailer and closed the road for five hours, Florida Highway Patrol troopers said. [FHP]
    Park Boulevard was closed for hours as the crash, which caused a boat and trailer to overturn, was cleaned up.
  5. Leonard Henry, inset, faces charges of burglary, battery of a law enforcement officer, criminal mischief and possession of a controlled substance. [TONY MARRERO | Times; Hillsborough County Sheriff's Office]
    The officer was hospitalized. The suspect was apprehended and taken to the Hillsborough County Jail.
  6. St. Lucie Mets outfielder Tim Tebow warms up before the beginning of the Mets at Threshers game at Spectrum Field Aug. 17, 2017. Clearwater is seeking a $79.7 million renovation of Spectrum Field and the Carpenter training complex used by the Philadelphia Phillies and Clearwater Threshers. [DOUGLAS CLIFFORD  |  Times]
    The city faces a number of landmines.
  7. AP file photo of then Gov. and now U.S. Sen. Rick Scott
    DeSantis, Rick Scott and other Republicans have taken a strong stance on Saudi Arabia in recent days. President Donald Trump?
  8. An undated photo of an inmate pod at the Falkenburg Road Jail in Hillsborough County. [Hillsborough County Sheriff's Office] [Hillsborough County Sheriff's Office]
    Marcus Anderson, 33, collapsed Dec. 1 at the Falkenburg Road Jail. He died six days later.
  9. Check tampabay.com for the latest breaking news and updates. [Tampa Bay Times]
    The intersection near the accident is a difficult one to safely navigate.
  10. A Brinks security guard and a Good Samaritan who came to his aid were shot during a robbery attempt at GTE Financial credit union in Brandon on Friday. [Tony Marrero, Times Staff]
    The search continued into the evening Saturday for the shooter, who is believed to be a serial bank robber.
Advertisement
Advertisement
Advertisement