Cox Media Group

Cox Media Group operates as a major United States-based media conglomerate with core businesses in broadcast television and radio. The organization owns and operates multiple television and radio stations across the country, delivering news, entertainment, and sports programming to local and national audiences. A significant component of its service portfolio includes live streaming capabilities, which extend its broadcast content to digital platforms and over-the-top services. This streaming infrastructure serves both its own station audiences and acts as a feed source for third-party platforms, indicating a role as a content distributor within the media ecosystem. The group's operational scope encompasses the full broadcast chain, from content production and acquisition to transmission via traditional over-the-air signals and internet-based delivery systems. Its services are positioned within the competitive commercial broadcast sector, relying on advertising revenue and carriage agreements. The organization maintains a notable footprint through its owned-and-operated stations, which serve various designated market areas across the United States.

The June 2021 ransomware attack provides a clear window into the group's operational scale and technological dependencies. The incident disrupted live streaming services across its portfolio of radio and television stations, demonstrating the integrated nature of its digital and broadcast networks. The attack's impact was severe enough to force the cancellation of scheduled programming and necessitated a drastic containment measure where the organization's entire autonomous system number was withdrawn from global internet routing tables, effectively isolating its internal networks from the public internet. This action, while halting external digital streams, allowed traditional terrestrial broadcasts and website operations to continue, highlighting a separation between core broadcast transmission and internal IT infrastructure. The prolonged outage of radio streams compared to television services suggests differentiated technical architectures or recovery priorities between its audio and video divisions. The event also underscored the group's position within a broader content supply chain, as third-party platforms that relied on its streaming feeds experienced concurrent outages, confirming its role as a critical upstream provider. Employee directives to shut down systems and log out of emails indicate a widespread, network-based compromise affecting internal communications and operational technology.