ARRL finally confirms ransomware gang stole data in cyberattack

ARRL confirmed a May 14 ransomware attack that encrypted its systems and appears to have resulted in the theft of some employees' personal information (about 150 people). The organization took systems offline, hired external forensic investigators, notified law enforcement, and offered 24 months of identity monitoring; sources suspect the Embargo ransomware group, though ARRL has not publicly linked the incident to a specific gang or observed misuse of the stolen data.