iHeartMedia + Entertainment, Inc. has notified affected individuals that between December 24, 2024, and December 27, 2024, an unauthorized actor viewed and obtained files stored on systems at a small number of the company’s local stations. This was a hacking or system intrusion rather than a lost device or an internal mistake. Once the activity was discovered, iHeartMedia says it activated its incident response protocols, worked to contain the intrusion, brought in a cybersecurity firm to investigate, and notified law enforcement. It took until April 11, 2025, for the company to complete its review of the affected files and confirm that some of them contained personal information belonging to the people it is now notifying.
