WideOpenWest (WOW!) experienced a significant breach in early 2025 when Arkana Ransomware exfiltrated two extensive databases containing approximately 403,000 and 2.2 million customer records respectively. The threat actors also gained unauthorized control over critical backend infrastructure, including WOW!’s AppianCloud and Symphonica platforms. The ransomware operation follows a three-phase extortion model comprising Ransom, Sale, and Leak stages, each designed to maximize pressure on victims to comply with their demands.
Source: https://cybersecuritynews.com/arkana-ransomware-stolen-2-2-million-customer-records/
TPRM report: https://scoringcyber.rankiteo.com/company/wow-internet-tv-&-phone
"id": "wow850071225",
"linkid": "wow-internet-tv-&-phone",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "",
"explanation": "Attack with significant impact with customers data leaks: Attack by hackers which causes data leak of customer information ( only if no ransomware )"{'affected_entities': [{'customers_affected': ['403,000', '2.2 million'],
'industry': 'Telecommunications',
'location': 'United States',
'name': 'WideOpenWest (WOW!)',
'type': 'Internet Service Provider'}],
'attack_vector': ['Credential Theft', 'Lateral Movement'],
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': ['403,000', '2.2 million'],
'type_of_data_compromised': ['Customer Records']},
'date_detected': '2025-03-31',
'description': 'The cybersecurity landscape witnessed a significant breach in '
'early 2025 when Arkana Ransomware emerged as a formidable '
'threat actor, making its debut with a devastating attack on '
'WideOpenWest (WOW!), a major U.S. internet service provider.',
'impact': {'data_compromised': ['Customer Records'],
'systems_affected': ['AppianCloud', 'Symphonica']},
'initial_access_broker': {'entry_point': ['Credential Theft'],
'high_value_targets': ['Customer Databases',
'Sensitive Corporate '
'Information']},
'motivation': ['Financial Gain', 'Data Exfiltration', 'Extortion'],
'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Arkana'},
'references': [{'source': 'SOCRadar'}],
'threat_actor': 'Arkana Ransomware',
'title': 'Arkana Ransomware Attack on WideOpenWest (WOW!)',
'type': 'Ransomware'}