Target Sector: Media, Entertainment & Gaming
Court filings, technical advisories, and SEC Form 8-K enforcement disclosures documenting cyber intrusions against organizations in Media, Entertainment & Gaming.
Key Facts
- 10 documented prosecution and advisory matters targeting Media, Entertainment & Gaming.
- Cumulative reported financial losses exceed $2.1 billion.
- 4 of 10 cases reached conviction, guilty plea, or final sentencing.
- Tracked actors include Lazarus Group, Scattered Spider / UNC5537, Evil Corp.
Documented Incidents (10)
U.S. v. Park Jin Hyok (Lazarus Group / Chosun Expo)
Department of Justice charges North Korean state-sponsored programmer with the 2014 Sony Pictures hack, the 2017 global WannaCry ransomware outbreak, and the $81 million Bangladesh Bank cyber heist.
U.S. v. Andrei Tyurin (JPMorgan Chase Data Breach)
Russian hacker who penetrated JPMorgan Chase and eleven other major U.S. financial institutions and media companies, stealing personal data belonging to over 100 million customers to fuel securities pump-and-dump schemes.
U.S. v. Yevgeniy Nikulin (LinkedIn & Dropbox Breaches)
Russian national who hacked into the corporate networks of LinkedIn, Dropbox, and Formspring, stealing login credentials of over 100 million users and selling the stolen database dumps on darknet forums.
U.S. v. Elena Alekseevna Khusyaynova (Project Lakhta)
Russian chief accountant charged with managing the financial administration of Project Lakhta, a massive state-funded covert influence and cyber operation designed to sow political discord in U.S. elections.
MGM Resorts Cyberattack (Scattered Spider / ALPHV Vishing Ingress)
Sophisticated social engineering and ransomware attack carried out by cybercrime collective Scattered Spider partnering with ALPHV/BlackCat, utilizing a 10-minute phone call to the Okta IT helpdesk to bypass MFA, hijack administrative privileges, and paralyze hotel reservations, digital keys, and casino slot machines.
State of Florida v. Graham Ivan Clark (Twitter VIP Bitcoin Hijack)
17-year-old hacker orchestrated a spearphishing and social engineering scheme targeting Twitter employees, gaining access to internal administrative customer service tools and hijacking 130 high-profile verified accounts (including Joe Biden, Barack Obama, Elon Musk, and Apple) to promote a fraudulent Bitcoin giveaway.
Snowflake Enterprise Credential Stuffing & Customer Cloud Thefts
Financially motivated threat actor collective UNC5537 systematically infiltrated over 165 corporate customer tenants hosted on Snowflake (including Ticketmaster, Santander Bank, Advance Auto Parts, and LendingTree). Attackers leveraged infostealer malware logs dating back years against enterprise user accounts that lacked multi-factor authentication and IP network allowlists, exfiltrating billions of consumer records.
Sony Pictures Entertainment Destructive Wiper Attack
North Korean state-sponsored operators infiltrated Sony Pictures Entertainment, deploying destructive Shamoon/Destover wipers that permanently erased thousands of servers and workstations, exfiltrating terabytes of unreleased films, employee SSNs, and executive emails.
Caesars Entertainment Scattered Spider Extortion ($15M Ransom)
Sophisticated vishing and social engineering intrusion by the Scattered Spider syndicate targeting an outsourced IT helpdesk servicing Caesars Entertainment, culminating in loyalty database exfiltration and approximately $15 million in cryptocurrency extortion paid to avert public release, disclosed in SEC Form 8-K Item 1.05.
U.S. v. Aleksandr Zhukov (Methbot Digital Ad Fraud Scheme)
Russian national and self-styled 'King of Fraud' Aleksandr Zhukov convicted after federal trial in Brooklyn and sentenced to 10 years in prison for running Methbot, a massive botnet and server farm that spoofed billions of digital video ad impressions, looting $36 million from American digital advertising networks.