Hackers take aim at Washington Post journalists in an apparent ‘targeted’ cyberattack

Hackers have attempted to infiltrate the email accounts of several journalists at the Washington Post, as revealed by an internal memo obtained by CNN. The newspaper discovered this potential targeted cyberattack last Thursday, leading to immediate action to safeguard its systems. On Friday, the Washington Post reset login credentials for all employees to prevent further unauthorized access. Executive Editor Matt Murray communicated to the staff that while the investigation is ongoing, it appears that only a limited number of journalist accounts were affected. Those impacted have been contacted directly, and Murray reassured employees that the incident did not compromise any additional systems or affect customer data.

The identity of the hackers remains unclear, but it is known that journalists are frequently targeted by both state-sponsored actors and cybercriminals. State-backed hackers often seek to monitor journalists' reporting, particularly on sensitive issues, while cybercriminals may aim to extort news organizations. The Wall Street Journal, which first reported on the Washington Post incident, has its own history of being targeted; it experienced a multi-year hacking campaign by suspected Chinese hackers that came to light in 2022, focusing on journalists covering China-related topics. As the investigation into the Washington Post hack continues, the newspaper is taking precautionary measures to bolster its cybersecurity and protect its journalists from future threats.