Cyber Incident Victim: Mammoth Screen
Date:
Sep 2018
Location:
United Kingdom
Summary
A British television production company developing a drama about North Korea was targeted by hackers linked to the country, infiltrating its computer systems following Pyongyang's public condemnation of the project as "slanderous." While the cyber intrusion did not inflict direct damage, it triggered significant security concerns within the industry and drew attention from British intelligence officials, particularly in light of North Korea's prior destructive attack on Sony Pictures over a similar film project. The targeted company shelved the drama series due to funding challenges, though no explicit connection to the cyber incident was confirmed. The breach highlighted ongoing threats posed by North Korean hackers, who have demonstrated increasing aggression in cyber operations against media and financial targets globally.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In August 2014, Channel 4 announced plans for a drama series titled *Opposite Number*, produced by Mammoth Screen, depicting a British nuclear scientist imprisoned in North Korea. North Korean officials condemned the project as a "slanderous farce" and demanded its cancellation to prevent diplomatic damage. Subsequently, North Korean hackers breached Mammoth Screen's computer systems, though the attack did not inflict operational damage or data destruction. The intrusion triggered significant alarm within the company due to concerns over potential escalation, particularly given the proximity to the November 2014 Sony Pictures attack—a destructive cyber operation attributed to North Korea in retaliation for the film *The Interview*. British intelligence agencies were aware of the Mammoth Screen breach but did not publicly attribute it or initiate formal diplomatic responses. The production company stated the project was shelved due to unresolved funding issues, though no explicit link was confirmed between the cyber incident and the cancellation.
The incident highlighted North Korea's pattern of targeting media projects perceived as hostile, employing cyber operations as retaliatory tools. Unlike the Sony attack—which involved data theft, network destruction, and coercive threats—Mammoth Screen's breach was limited to unauthorized access without immediate disruptive effects. However, it amplified concerns within the UK media industry about vulnerability to state-sponsored hacking. Broader context included North Korea's escalating cyber campaigns, such as the 2017 WannaCry ransomware attacks affecting the NHS, though the UK government did not formally link these incidents. Mammoth Screen's experience underscored the asymmetric nature of cyber threats against private entities and the lack of standardized governmental response protocols for such intrusions in the UK at the time.