iHeartMedia + Entertainment, Inc.

On April 30, 2025, the Maine Office of the Attorney General disclosed a data breach at iHeartMedia + Entertainment, Inc., occurring between December 24–27, 2024. The incident was classified as an external system breach (hacking), compromising the sensitive personal data of three Maine residents. The exposed information included Social Security numbers, driver’s license numbers, and financial account details highly sensitive identifiers that elevate risks of identity theft and financial fraud. In response, iHeartMedia is providing one year of credit monitoring and identity theft protection to the affected individuals. While the breach’s scope appears limited to three residents, the nature of the stolen data (financial and government-issued identifiers) suggests potential for severe downstream consequences, including unauthorized account access, loan fraud, or long-term identity exploitation. The breach underscores vulnerabilities in iHeartMedia’s external systems, though no further details on the attack vector (e.g., phishing, exploit) or broader organizational impact were disclosed.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/79b5d25d-ddf1-4f01-802d-1b8c43010377.html

TPRM report: https://www.rankiteo.com/company/iheartmedia-washington-dc

"id": "ihe033090625",
"linkid": "iheartmedia-washington-dc",
"type": "Breach",
"date": "12/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3,
                        'industry': 'media and entertainment',
                        'location': 'United States (affecting Maine residents)',
                        'name': 'iHeartMedia + Entertainment, Inc.',
                        'type': 'corporation'}],
 'attack_vector': 'external system breach (hacking)',
 'customer_advisories': 'one year of credit monitoring and identity theft '
                        'protection services offered to affected residents',
 'data_breach': {'number_of_records_exposed': 3,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'driver’s license numbers',
                                              'financial account information']},
 'date_publicly_disclosed': '2025-04-30',
 'description': 'On April 30, 2025, the Maine Office of the Attorney General '
                'reported a data breach involving iHeartMedia + Entertainment, '
                'Inc. that occurred between December 24, 2024, and December '
                '27, 2024. The breach, identified as an external system breach '
                '(hacking), affected three Maine residents whose information '
                'included Social Security numbers, driver’s license numbers, '
                'and financial account information. iHeart is offering one '
                'year of credit monitoring and identity theft protection '
                'services to the affected residents.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'driver’s license numbers',
                                 'financial account information'],
            'identity_theft_risk': 'high',
            'payment_information_risk': 'high'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'remediation_measures': 'one year of credit monitoring and '
                                      'identity theft protection services for '
                                      'affected residents'},
 'title': 'iHeartMedia + Entertainment, Inc. Data Breach (2024)',
 'type': 'data breach'}