Hungarian Media Giant Mediaworks Hit by 8.5TB Data Leak in Ransomware Attack
A cyber-extortion group, World Leaks, has claimed responsibility for a ransomware attack on Hungarian media conglomerate Mediaworks, resulting in the online publication of nearly 8.5 terabytes of stolen data. The leaked files, posted on the group’s dark web site last week, reportedly include payroll records, contracts, financial statements, and internal communications, according to local media reviews.
Mediaworks confirmed the breach on Friday, acknowledging that "a significant amount of illegally obtained data may have come into the possession of unauthorized persons" and announcing an internal investigation. The company also warned journalists against reporting on the leaked material, citing potential criminal liability for handling stolen data.
Despite the warning, independent outlets like Media1 published details from the leak, including notes from a January 2025 editorial meeting suggesting Mediaworks would "contact Moscow for help" regarding articles critical of Ukrainian President Volodymyr Zelensky. Media1 refused to remove its report, arguing the information was of public interest, particularly given Hungary’s pro-Russia stance under Prime Minister Viktor Orbán and its contentious role in the Ukraine war. Mediaworks subsequently threatened legal action against the outlet.
The authenticity of the leaked data, including the alleged memo, could not be independently verified.
Mediaworks, which operates dozens of newspapers, magazines, and online outlets, is widely perceived as part of a pro-government media network aligned with Orbán’s allies. The company has faced cyber incidents before, including a 2022 defacement attack by Anonymous, which accused its outlets of spreading pro-Kremlin propaganda.
World Leaks, the group behind the attack, emerged in early 2025 as a rebrand of Hunters International, a ransomware operation that shifted from system encryption to data theft and extortion. While the group has primarily targeted U.S. organizations, it has also struck victims in Europe, India, and Canada. The Mediaworks breach marks its first known attack in Hungary.
Source: https://therecord.media/ransomware-group-claims-breach-of-pro-orban-media-firm
MediaWorks NZ cybersecurity rating report: https://www.rankiteo.com/company/mediaworks-nz
"id": "MED1777911831",
"linkid": "mediaworks-nz",
"type": "Ransomware",
"date": "4/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Media',
'location': 'Hungary',
'name': 'Mediaworks',
'type': 'Media Conglomerate'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Likely (payroll '
'records)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Payroll records',
'Contracts',
'Financial statements',
'Internal communications']},
'date_publicly_disclosed': '2025-01-17',
'description': 'A cyber-extortion group, World Leaks, has claimed '
'responsibility for a ransomware attack on Hungarian media '
'conglomerate Mediaworks, resulting in the online publication '
'of nearly 8.5 terabytes of stolen data. The leaked files '
'include payroll records, contracts, financial statements, and '
'internal communications. Mediaworks confirmed the breach and '
'warned journalists against reporting on the leaked material, '
'citing potential criminal liability.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': '8.5 terabytes',
'legal_liabilities': 'Potential criminal liability for handling '
'stolen data'},
'investigation_status': 'Ongoing (internal investigation)',
'motivation': 'Extortion, Data Theft',
'ransomware': {'data_exfiltration': 'Yes',
'ransomware_strain': 'World Leaks (rebrand of Hunters '
'International)'},
'references': [{'source': 'Media1'}, {'source': 'Local media reviews'}],
'regulatory_compliance': {'legal_actions': 'Threatened legal action against '
'Media1'},
'response': {'communication_strategy': 'Warned journalists against reporting '
'on leaked material; threatened legal '
'action',
'incident_response_plan_activated': 'Yes'},
'threat_actor': 'World Leaks',
'title': 'Hungarian Media Giant Mediaworks Hit by 8.5TB Data Leak in '
'Ransomware Attack',
'type': 'Ransomware, Data Leak'}