McClatchy Media Network, Sacramento Bee, Miami Herald and Charlotte Observer: NC students, school employees receive online ransom threat from Canvas data breach

McClatchy Media Network Hit by Cyberattack, Disrupting Operations

The McClatchy Media Network, a major U.S. news publisher operating 30 daily newspapers including the Miami Herald, Sacramento Bee, and Charlotte Observer experienced a significant cyberattack that disrupted its operations. The incident, detected in early June 2024, targeted the company’s internal systems, forcing temporary shutdowns of key digital and print workflows.

While details remain limited, initial reports indicate the attack may have involved ransomware or a similar disruption, though McClatchy has not confirmed the exact nature of the breach. The company’s IT teams responded by isolating affected systems to contain the threat, leading to delays in publishing schedules and restricted access to certain internal tools. Some newspapers reported brief interruptions in print and digital distribution, though no customer data exposure has been publicly confirmed.

McClatchy, which serves millions of readers across 14 states, has not disclosed whether a ransom demand was made or if the attack was politically motivated. The incident underscores the growing vulnerability of media organizations to cyber threats, particularly as digital infrastructure becomes increasingly critical to news production and distribution. Investigations are ongoing, with federal agencies and cybersecurity firms assisting in recovery efforts.

Source: https://www.newsobserver.com/news/local/education/article315684599.html

McClatchy Media Network TPRM report: https://www.rankiteo.com/company/the-mcclatchy-company

Sacramento Bee TPRM report: https://www.rankiteo.com/company/the-sacramento-bee

Miami Herald TPRM report: https://www.rankiteo.com/company/the-mcclatchy-company

Charlotte Observer TPRM report: https://www.rankiteo.com/company/charlotteobserver

"id": "thechathe1778261340",
"linkid": "the-sacramento-bee, charlotteobserver, the-mcclatchy-company",
"type": "Ransomware",
"date": "5/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'millions of readers across 14 '
                                              'states',
                        'industry': 'news and publishing',
                        'location': 'United States',
                        'name': 'McClatchy Media Network',
                        'size': 'large',
                        'type': 'media publisher'}],
 'date_detected': '2024-06-01',
 'description': 'The McClatchy Media Network, a major U.S. news publisher '
                'operating 30 daily newspapers including the *Miami Herald*, '
                '*Sacramento Bee*, and *Charlotte Observer*, experienced a '
                'significant cyberattack that disrupted its operations. The '
                'incident targeted the company’s internal systems, forcing '
                'temporary shutdowns of key digital and print workflows.',
 'impact': {'operational_impact': 'delays in publishing schedules, restricted '
                                  'access to internal tools, interruptions in '
                                  'print and digital distribution',
            'systems_affected': ['digital workflows',
                                 'print workflows',
                                 'internal tools']},
 'investigation_status': 'ongoing',
 'references': [{'source': 'Initial reports'}],
 'response': {'containment_measures': 'isolating affected systems',
              'incident_response_plan_activated': True,
              'third_party_assistance': True},
 'title': 'McClatchy Media Network Hit by Cyberattack',
 'type': ['ransomware', 'disruption']}