Urban One, the parent company of Radio One and Reach Media, was the victim of a data breach in February as “Ransomware Gang” Cactus stole 2.5 TB of data from the company.

Comparitech reports that Cactus claimed responsibility for the breach on March 12 with Urban One, which was discovered by the company on March 15. The report states that the breach included employee names, Social Security numbers, direct deposit info, W-2 information, and home addresses.

Urban One sent a letter to affected people offering two free years of Experian credit monitoring. The letter explained what happened stating, “Beginning on February 13, 2025, an unauthorized third party gained access to our network through a sophisticated social engineering campaign, which led to the unauthorized exfiltration of company data, including employee personal information. We became aware of the incident on March 15, 2025, and, following our incident response process, immediately notified law enforcement, launched an investigation with the assistance of external cybersecurity experts to minimize incident impact, determine the scope of the incident, and assess what data may have been involved. While our investigation is ongoing, the number of systems impacted is limited and the unauthorized access did not impact our ability to conduct business as usual. On March 30, 2025, our forensic investigation identified that certain personally identifiable information related to employees was obtained by a third party.”