MBS Radio Listed by metaencryptor Ransomware Group

On August 15, 2024, MBS Radio, a locally owned operator of 24 radio stations serving Nova Scotia, New Brunswick, and Prince Edward Island, appeared on the leak site of the metaencryptor ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The number of records affected remains unknown, and the leak-site listing does not detail precisely which documents were taken.

Reported Details from the Listing

The metaencryptor leak site entry states that MBS Radio suffered a ransomware incident in which attackers successfully exfiltrated internal files before encryption. No specific volume of data or list of exposed record types is provided in the disclosure. The posting follows the group’s standard format of publishing samples or full datasets when victims do not pay the demanded ransom. Public mirrors of the onion site, such as those tracked on ransomware.live, surfaced the listing on the stated date.

Internal files exfiltrated is the only category of information confirmed by the primary source. Whether the material includes employee records, listener databases, financial documents, or contracts is not stated.

Why This Matters for You and Your Family

When a regional media company like MBS Radio loses control of internal files, anyone whose information touched those systems faces direct risk. Radio stations routinely collect names, addresses, phone numbers, email addresses, and sometimes dates of birth or payment details from contest participants, advertisers, donors, and employees. If any of those records were among the exfiltrated material, your personal information could now sit on a criminal server.

Even if you never entered a contest or bought advertising, family members who work at or correspond with local stations may have had HR files, payroll spreadsheets, or vendor lists exposed. The breach therefore touches ordinary listeners and their households in Atlantic Canada far more than it affects the company’s executives.

Doxxing and Identity-Chain Implications

Stolen internal files frequently contain spreadsheets that link names to email addresses, phone numbers, and sometimes Social Insurance Numbers or dates of birth. Once attackers possess those linkages, they can combine them with data from previous breaches to build complete identity profiles. A single leaked work email can reveal your username patterns across streaming services, online shopping accounts, and children’s gaming platforms.

These chains accelerate doxxing. An attacker who obtains your name and phone number from a radio station’s contest database can quickly locate associated social-media handles, then target gaming accounts that reuse the same password or security questions. Credential leaks of this nature routinely cascade into account takeovers that expose family photos, chat logs, and location data. Continuous monitoring across 13.1B+ breach records and 100+ platforms becomes essential because new linkages surface weeks or months after the initial posting.

Metaencryptor’s Known Track Record

Public reporting attributes metaencryptor with emerging in early 2024 as a ransomware-as-a-service operation that focuses on smaller organizations and regional businesses. The group typically gains initial access through phishing emails or exploited remote-desktop services, exfiltrates data before deploying encryption, and then posts samples on its dark-web leak site when victims ignore ransom demands. Notable prior targets have included municipal governments, healthcare clinics, and small manufacturing firms, though exact victim counts are not publicly tallied. Their playbook emphasizes speed: short negotiation windows followed by data publication if payment is not received. The MBS Radio listing fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, using cleanup of Warden where possible.
• Rotate any password you ever used at MBS Radio or its contest portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring so the next breach that touches your data is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites for you.

The incident underscores that even regional organizations handling everyday personal information can become gateways to identity theft and harassment. Staying ahead requires more than changing a password once; it demands persistent visibility into how your data travels across the internet. Try DoxxScan for its identity-chain mapping, continuous monitoring across 13.1B+ breach records and 100+ platforms, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts.