Media
6 organizations, 10 confirmed incidents.
Media covers publishers, broadcasters and platforms that hold subscriber, advertiser and, increasingly, source and contributor data. A breach exposing a confidential source or contributor carries an added editorial sensitivity that a breach of ordinary subscriber data does not, even though notification law draws no such distinction. There is no media-specific breach-notification law; an incident is reported under the same general state or national data-breach notification statute that applies to any other organization holding the same kind of personal information, and a publicly traded media company separately discloses a material cybersecurity incident to the SEC on Form 8-K, Item 1.05.
Incidents by year
| Year | Confirmed incidents |
|---|---|
| 2025 | 2 |
| 2024 | 2 |
| 2023 | 1 |
| 2020 | 2 |
| 2019 | 3 |
Top organizations by confirmed incidents
| Organization | Confirmed incidents |
|---|---|
| Urban One, Inc. | 3 |
| Roku, Inc. | 2 |
| Warner Music Group | 2 |
| Cable One, Inc. | 1 |
| LEE ENTERPRISES, Inc | 1 |
| News Corporation | 1 |
Questions and answers
How many confirmed incidents involve Media organizations on Breach Census?
10 confirmed incidents across 6 organizations in the Media sector are recorded on Breach Census.
Which year had the most confirmed Media incidents?
2019, with 3 confirmed incidents, the most of any year on record for this sector.
Which attack types are most common in the Media sector?
Among Media sector incidents that carry an attack-type classification, the most common one is Malware Deployment.
What counts as a confirmed incident for the Media sector?
An incident counts here once its primary organization carries the Media sector label and the incident itself has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.