iHeartMedia data breach exposes personal information at "a small number" of their stations
Learn More
iHeartMedia, the largest audio company in the United States with over 850 radio stations across the US and Canada, is reporting a significant data breach that occurred in December 2024.
The company operates the popular iHeartRadio streaming service and SiriusXM satellite radio,
The cyber attack took place between December 24th and December 27th, 2024. The breach was detected in the same month and "fully addressed" within a week, but the investigation continued until April 11th, 2025. The exposed data includes:
- Social Security numbers
- Driver's license numbers
- Passport numbers
- State ID card numbers
- Tax ID numbers
- Financial account numbers
- Payment card numbers
The number of affected individuals and the nature of the attack are not disclosed. iHeartMedia claims that unauthorized actors gained access to sensitive personal information stored on systems at "a small number" of their local stations, but they also confirmed that victims include residents of multiple states: Maryland, New York, New Mexico, North Carolina, and Rhode Island. That doesn't sound like "small number" to us.
The company began notifying affected customers on April 30th, 2025.
