Crescent Hill Radio

Summary

A Kentucky non-profit radio station experienced unauthorized access to its FM broadcast system, resulting in an anti-Trump song being played repeatedly for approximately 15 minutes. Hackers exploited the station's broadcasting software, which enabled emergency signal interruptions at the transmitter tower, to override regular programming. The station promptly terminated the FM transmission upon detection and issued public apologies for the offensive content, clarifying that its internet stream remained unaffected. This incident disrupted the organization's operations and contradicted its stated mission of maintaining neutrality while promoting local artists.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On January 20, 2017, Crescent Hill Radio WCHQ 100.9 FM, a non-profit Louisville radio station, experienced unauthorized access to its FM broadcast system during regular programming. Hackers interrupted transmissions to repeatedly play "FDT (F**k Donald Trump)," a song by rap artists YG & Nipsey Hussle, for approximately 15 minutes. The intrusion coincided with President Donald Trump’s inauguration day. Station personnel detected the breach and terminated the FM broadcast feed upon identifying the unauthorized content. WCHQ promptly notified its audience through social media, stating the transmitter tower had been compromised and condemning the act as illegal. The station’s internet streaming service remained operational and unaffected throughout the incident. Program Director Gary Sampson later confirmed the song’s title and duration publicly.

The attackers exploited broadcasting software designed for emergency alerts and government warnings, which had transmitter-level access to override live signals. This breach caused temporary disruption to FM programming but did not damage physical equipment. WCHQ issued a formal apology on Facebook for offensive content, emphasizing the violation was external and against their operational policies. The station reiterated its commitment to neutrality and supporting local Southern Indiana/Kentucky artists, noting the incident diverted focus from community-driven objectives. No further technical details about the intrusion vector or perpetrator identification were disclosed publicly. Service was restored after securing the compromised system components.

Sources

Sources available to members: 1 source.