Dish: Someone snatched our data, if you're wondering why our IT systems went down
(2023/02/28)
- Reference: 1677618409
- News link: https://www.theregister.co.uk/2023/02/28/dish_outage_data_attack/
- Source link:
Dish has confirmed what everyone was suspecting, given the ongoing downtime experienced by some of its systems, that the US telco was hit by criminal hackers.
In a filing [1]today to America's financial watchdog about the snafu, Dish confirmed "the outage was due to a cyber-security incident," though it didn't share any details as to what the incident was, nor did the broadband biz directly answer our questions to that end when asked.
Dish said it had notified the appropriate law enforcement authorities and was conducting an investigation into the intrusion, which was [2]initially disclosed to shareholders during the company's February 23 Q4 earnings call. Dish told us the call was the same day as the cyber incident.
[3]
Now stretching into its sixth day, the outage has reportedly affected Dish's internal communications, customer call centers, and internet sites. The phone line to the company's corporate comms team has been busy each time we tried to call, we note. Dish's television network and its other services, including its Sling streaming service "and our wireless and data networks," remain operational, the telco said.
[4]
[5]
Some Dish employees who work remotely have been unable to access their work systems, as the company's VPN service and other work tools are said to remain offline.
Data was stolen, but no one'll say ransomware
Dish is being tight-lipped about what exactly happened in its network last week, and speculation has been rampant that it was hit by a ransomware attack.
Without an actual statement from Dish, or internal information that The Register could verify, it falls to speculation to determine whether ransomware was the cause of Dish's troubles, but luckily the corporation included one tidbit that could point to such: the culprits did make off with some data.
Dish the dirt... If you know what's going on at Dish, [6]hit us up securely and anonymously. Our tipsters so far have indicated the telco was infected with some kind of data-stealing ransomware.
"On February 27, 2023, the Corporation became aware that certain data was extracted from the Corporation's IT systems as part of this incident," Dish said. Leaving the door as open as it possibly could, the company added that "it is possible the investigation will reveal that the extracted data includes personal information," though whether that's customer or employee info is unclear, and Dish didn't answer that question either.
"The security of our customers' data is important to us, and if we learn that information was compromised, we'll take the appropriate steps and let any impacted customers know," a Dish spokesperson told us in an emailed statement.
[7]Dish multi-day outage rolls on as ransomware fears grow
[8]US Marshals Service leaks 'law enforcement sensitive information' in ransomware incident
[9]Lufthansa flights grounded by major IT snafu, 'construction work' blamed
[10]What's up with IT, Doc? Rabbit hole reveals cause of outage
Whether or not Dish was hit with ransomware, it's unlikely to pull free from this kerfuffle anytime soon. Dish stock dropped nearly six percent today on its admission of a cybersecurity kerfuffle, and a near-simultaneous announcement that Bank of America [11]double-downgraded Dish stock from buy to underperform, and cut its price target from $30 to $10 - lower than its value of $11 at time of writing. BoA did say that its downgrade wasn't directly related to the outage, and was instead based on the company's balance sheet and the future of its 5G services.
Dish also said in its [12]annual report that it lost more than 200,000 Dish TV subscribers in the final three months of the year.
"Any deterioration in our operational performance and subscriber satisfaction could adversely affect our business, financial condition and results of operations," it reported. ®
Get our [13]Tech Resources
[1] https://www.sec.gov/ix?doc=/Archives/edgar/data/0001001082/000155837023002254/dish-20230223x8k.htm
[2] https://www.theregister.com/2023/02/27/dish_outage_ransomware/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/Author/Email/Brandon-Vigliarolo
[7] https://www.theregister.com/2023/02/27/dish_outage_ransomware/
[8] https://www.theregister.com/2023/02/28/us_marshals_ransomware_data_exfiltration/
[9] https://www.theregister.com/2023/02/15/lufthansa/
[10] https://www.theregister.com/2023/02/10/on_call/
[11] https://www.barrons.com/articles/dish-stock-downgrade-5g-50a52d40
[12] https://www.sec.gov/ix?doc=/Archives/edgar/data/0001001082/000155837023001811/dish-20221231x10k.htm#Item15EXHIBITSFINANCIALSTATEMENTSCHEDULE
[13] https://whitepapers.theregister.com/
In a filing [1]today to America's financial watchdog about the snafu, Dish confirmed "the outage was due to a cyber-security incident," though it didn't share any details as to what the incident was, nor did the broadband biz directly answer our questions to that end when asked.
Dish said it had notified the appropriate law enforcement authorities and was conducting an investigation into the intrusion, which was [2]initially disclosed to shareholders during the company's February 23 Q4 earnings call. Dish told us the call was the same day as the cyber incident.
[3]
Now stretching into its sixth day, the outage has reportedly affected Dish's internal communications, customer call centers, and internet sites. The phone line to the company's corporate comms team has been busy each time we tried to call, we note. Dish's television network and its other services, including its Sling streaming service "and our wireless and data networks," remain operational, the telco said.
[4]
[5]
Some Dish employees who work remotely have been unable to access their work systems, as the company's VPN service and other work tools are said to remain offline.
Data was stolen, but no one'll say ransomware
Dish is being tight-lipped about what exactly happened in its network last week, and speculation has been rampant that it was hit by a ransomware attack.
Without an actual statement from Dish, or internal information that The Register could verify, it falls to speculation to determine whether ransomware was the cause of Dish's troubles, but luckily the corporation included one tidbit that could point to such: the culprits did make off with some data.
Dish the dirt... If you know what's going on at Dish, [6]hit us up securely and anonymously. Our tipsters so far have indicated the telco was infected with some kind of data-stealing ransomware.
"On February 27, 2023, the Corporation became aware that certain data was extracted from the Corporation's IT systems as part of this incident," Dish said. Leaving the door as open as it possibly could, the company added that "it is possible the investigation will reveal that the extracted data includes personal information," though whether that's customer or employee info is unclear, and Dish didn't answer that question either.
"The security of our customers' data is important to us, and if we learn that information was compromised, we'll take the appropriate steps and let any impacted customers know," a Dish spokesperson told us in an emailed statement.
[7]Dish multi-day outage rolls on as ransomware fears grow
[8]US Marshals Service leaks 'law enforcement sensitive information' in ransomware incident
[9]Lufthansa flights grounded by major IT snafu, 'construction work' blamed
[10]What's up with IT, Doc? Rabbit hole reveals cause of outage
Whether or not Dish was hit with ransomware, it's unlikely to pull free from this kerfuffle anytime soon. Dish stock dropped nearly six percent today on its admission of a cybersecurity kerfuffle, and a near-simultaneous announcement that Bank of America [11]double-downgraded Dish stock from buy to underperform, and cut its price target from $30 to $10 - lower than its value of $11 at time of writing. BoA did say that its downgrade wasn't directly related to the outage, and was instead based on the company's balance sheet and the future of its 5G services.
Dish also said in its [12]annual report that it lost more than 200,000 Dish TV subscribers in the final three months of the year.
"Any deterioration in our operational performance and subscriber satisfaction could adversely affect our business, financial condition and results of operations," it reported. ®
Get our [13]Tech Resources
[1] https://www.sec.gov/ix?doc=/Archives/edgar/data/0001001082/000155837023002254/dish-20230223x8k.htm
[2] https://www.theregister.com/2023/02/27/dish_outage_ransomware/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y-6HljPV9eEhUJyo-PmxfQAAABI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/Author/Email/Brandon-Vigliarolo
[7] https://www.theregister.com/2023/02/27/dish_outage_ransomware/
[8] https://www.theregister.com/2023/02/28/us_marshals_ransomware_data_exfiltration/
[9] https://www.theregister.com/2023/02/15/lufthansa/
[10] https://www.theregister.com/2023/02/10/on_call/
[11] https://www.barrons.com/articles/dish-stock-downgrade-5g-50a52d40
[12] https://www.sec.gov/ix?doc=/Archives/edgar/data/0001001082/000155837023001811/dish-20221231x10k.htm#Item15EXHIBITSFINANCIALSTATEMENTSCHEDULE
[13] https://whitepapers.theregister.com/
Re: Dish?
diodesign
FWIW Dish has about 8 million subscribers; suspected ransomware infections are interesting especially if they bring down production systems; and >50% of our readers are in the US. And it was published at 9pm UK, 1pm PT.
That's why we cover US-based news at this time of day, as much as we love everyone from every country. We have the ability to make certain stories appear on the homepage only for certain regions, but we only do that to avoid swamping the homepage with news about one particular region - and when we do, some people are upset they might be missing out on articles.
tldr: we can't please all of the people all of the time.
C.
Dish?
Why did I have to click on the link of a British web site to discover that the story was about an (obscure, to me) American telco? I really don't give a flying fork about their local difficulties.
-A.