Malware attack on Tribune Publishing's network disrupts the printing and distribution of Saturday editions of LA Times, WSJ, NYT, and other papers
A cyberattack that appears to have originated from outside the United States caused major printing and delivery disruptions at several newspapers across …
Context & Ripple Effects
The malware hit Tribune Publishing's shared production network, which prints and distributes not just its own titles but partner papers including the LA Times, the WSJ, and the NYT — so a single compromised system took out Saturday editions across multiple mastheads at once. The disruption lands on top of a documented pattern of cyber operations aimed at US news organizations: the FBI was already investigating suspected Russian intelligence-linked intrusions of the NYT and other outlets back in 2016 (FBI probe of news-org intrusions).
First-order effects
- Saturday print editions of the LA Times, WSJ, NYT, and other Tribune-printed papers were delayed or undelivered, hitting subscribers and newsstand revenue on one of the week's highest-circulation days.
Second-order effects
- Papers that outsource printing to Tribune Publishing now face a shared-infrastructure risk they don't control, forcing each title to weigh redundant print arrangements or contingency distribution plans.
Third-order effects
- With the 2016 FBI probe, the 2017 global ransomware wave that hit Maersk and Merck (NotPetya-style ransomware spread), and the later News Corp breach attributed to China (News Corp email hack), media companies are being treated as recurring targets of state-linked cyber operations — pushing publishers toward security spending and infrastructure decisions normally reserved for critical industries.
The trend: News organizations are converging with banks and utilities as standing targets of nation-state cyber operations, and their shared production infrastructure is becoming the soft spot attackers exploit.