The National Association for Amateur Radio this week confirmed it notified 150 people about a May 2024 ransomware attack that compromised names, Social Security numbers, and addresses. The attack on the American Radio Relay League (ARRL) forced the company to take its Logbook of the World offline and shut down its phone system, among other disruptions.
No ransomware gang has claimed responsibility for the attack as of time of writing.
The ARRL confirmed its Logbook of the World returned to service on July 1, 2024. It can also once again process award applications, but not print or deliver them. The online DXCC application is still unavailable as of time of writing. A July 3 update states the ARRL is still unable to post exam session dates or create new permits, licenses, and stickers.
Some ARRL member expressed frustration at the lack of information regarding the attack when it was first announced. This month’s notification shows the scope of the attack but doesn’t name the attackers, referring to them instead as an “international cyber group.”
ARRL declined to answer Comparitech’s questions regarding if a ransom was demanded, whether ARRL paid it, and how attackers breached ARRL’s network.
We recommend victims take advantage of the free identity monitoring service offered by AARL via Kroll.
Ransomware in the USA
Ransomware attacks use malware to encrypt computers on a victim’s network and steal data from the victim’s storage. Ransomware gangs often extort victims twice: once for a decryption key to restore systems, and again in exchange for not selling or publicly releasing stolen data. If a victim refuses to pay, they may face substantial downtime, permanently lose data, and put their users at risk of identity theft and other crimes.
So far this year, Comparitech researchers have tracked 225 confirmed ransomware attacks, affecting 32.4 million records. The average ransom is $1.76 million. We further tracked 978 unconfirmed ransomware attacks on US entities in 2024.
About the American Radio Relay League
Founded in 1914, the National Association for Amateur Radio, also known as the American Radio Relay League (ARRL), is a non-profit organization for radio amateurs. It has more than 160,000 ham radio operators, according to its website. Members benefit from access to ARRL-sponsored contests and awards, technical advice, educational programs, and a community of people with a shared interest in amateur radio. The organization is governed by a member-elected, volunteer board of directors.
Logbook of the World is the ARRL’s database lets members submit electronic logs for amateur radio contacts (QSOs) and for confirmation (QSLs) that track their progress toward achievements and awards.