News Corp., the parent company of The Wall Street Journal and several other news outlets, said that hackers were inside its network for nearly two years and made off with private documents and emails.
News Corp. first disclosed the breach in February 2022, in a filing with the Securities and Exchange Commission and an article in The Wall Street Journal. The company said at the time that it discovered “persistent cyberattack activity” a month earlier in a third-party cloud service it used. Security firm Mandiant, which aided News Corp. in investigating the intrusion, told the WSJ it believed the attack was conducted by a threat actor aligned with the Chinese government.
Last week, News Corp. sent a breach notification letter to at least one affected employee that provided additional details.
“Based on the investigation, News Corp understands that, between February 2020 and January 2022, an unauthorized party gained access to certain business documents and emails from a limited number of its personnel’s accounts in the affected system, some of which contained personal information,” the letter stated. “Our investigation indicates that this activity does not appear to be focused on exploiting personal information.”