--- title: "Learn From the New York Times Hacking Incident" id: "15750" type: "post" slug: "learn-from-the-new-york-times-hacking-incident" published_at: "2013-02-05T12:58:30+00:00" modified_at: "2026-11-09T19:06:21+00:00" url: "https://associationsnow.com/2013/02/05/learn-from-the-new-york-times-hacking-incident/" markdown_url: "https://associationsnow.com/2013/02/05/learn-from-the-new-york-times-hacking-incident.md" excerpt: "The world’s most well-known news organization found itself on the losing end of a hacking incident—along with other organizations. Having a proactive approach can go far to prevent something similar from happening to you." taxonomy_category: - "Marketing / Communications" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "Data Breach" - "information security" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Association CEO / Executive Director" - "Executive Team" - "VP" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Learn From the New York Times Hacking Incident How high-stakes is your data? As *The New York Times* learned recently, if you do something that ruffles the feathers of someone powerful, your data may be at risk. The newspaper, which ran an article critical of Chinese Prime Minister Wen Jiabao’s family, [suffered a months-long security incident (opens in a new tab)](http://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html?pagewanted=all) that affected employee passwords, company data, and home computers owned by reporters. Forty-five separate pieces of malware, which were traced to China, were used by the hackers. “Now that a Chinese attack on *The New York Times* is international news, any dissident or potential whistleblower in China will be wary of talking to journalists at the paper—or, for that matter, all journalists,” Slate’s Farhad Manjoo [recently said (opens in a new tab)](http://www.slate.com/articles/technology/technology/2013/01/new_york_times_chinese_hackers_the_attack_against_the_newspaper_of_record.html) . > Even on a small scale, it’s worth keeping in mind what you can do to ease concerns of members and employees. And *The Times* wasn’t alone. *The Washington Post* [announced (opens in a new tab)](http://www.washingtonpost.com/business/technology/chinese-hackers-suspected-in-attack-on-the-posts-computers/2013/02/01/d5a44fde-6cb1-11e2-bd36-c0fe61a205f6_story.html) that a similar hacking incident happened at the paper in 2011 and 2012, and *The Wall Street Journal* [announced an incident of its own (opens in a new tab)](http://www.nytimes.com/2013/02/01/technology/wall-street-journal-reports-attack-by-china-hackers.html) . (Disclosure: I worked for the Washington Post Co. during the period of the alleged hacking, though there have been no reports of employee data being compromised in that incident.) Think it couldn’t happen to your organization? It could. First of all, associations such as the U.S. Chamber of Commerce and the [Institute of Electrical and Electronics Engineers (opens in a new tab)](http://ieeelog.com/) (IEEE) have suffered major security incidents in recent years; the Chamber’s [was very similar (opens in a new tab)](http://abcnews.go.com/International/chinese-hack-us-chamber-commerce-authorities/story?id=15207642) to the one that hit *The* *Times*. And, as in the case of *Wired* journalist Mat Honan, it can [happen to an individual (opens in a new tab)](http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/) , too. Even in on a small scale, it’s worth keeping in mind what you can do to ease concerns of members and employees. Some ideas: **Be proactive:** Often, the best way to handle a security incident is to prevent it from happening in the first place. Update your software—operating systems, antivirus software, PDF viewers, [Flash players](http://associationsnow.com/2012/11/report-microsoft-software-security-improves-greatly/) , [Java runtimes](http://associationsnow.com/2013/01/what-you-should-know-about-javas-security-issues/) , and so on—early and often. But when a breach does occur, have a plan in place so you know what to do next. While only you will know what makes sense for your association’s interests, Microsoft’s TechNet [offers a useful set of guidelines (opens in a new tab)](http://technet.microsoft.com/en-us/library/cc700825.aspx#XSLTsection126121120120) to get started. **Solve the problem:** Ultimately, you need to find the source of the problem, isolate it, and prevent further damage. If possible, solve the problem internally before bringing it to the public’s attention—although, in cases such as [the IEEE’s membership breach last year (opens in a new tab)](http://associationsnow.com/2012/09/engineering-group-ieee-hit-by-member-data-breach/) , you may find your hand forced by a third party. **When necessary and useful, disclose:** While not every incident requires public disclosure, larger ones do. Tell members and employees what you know as soon as you can paint a full picture. Offer useful information to members to fully explain what it all means, while being careful not to provide sensitive details that could endanger member data further. **Answer questions:** Much as in any crisis involving member or employee data, a focus on customer support can help reassure people who fear that their information was exposed. Coordinate with your public relations department, and be ready to explain what happens next. Ultimately, this is a PR problem as much as a technical one. If you faced a security crisis like *The New York Times*did, how would you resolve it and protect your interests? (photo by Jason Kuffer/Flickr) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#Data Breach](https://associationsnow.com/tag/data-breach/) [#information security](https://associationsnow.com/tag/information-security/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [PodcastAssociations NOW Presents: More Than Marketing: The Power of Strategic CommunicationsJuly 30, 2026](https://associationsnow.com/2026/07/30/associations-now-presents-more-than-marketing-the-power-of-strategic-communications/) - [PodcastAssociations NOW Presents: Why Slower Marketing Can Drive Stronger Member Engagement (Episode 27)June 25, 2026](https://associationsnow.com/2026/06/25/associations-now-presents-why-slower-marketing-can-drive-stronger-member-engagement-episode-27/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2013%2F02%2F05%2Flearn-from-the-new-york-times-hacking-incident%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !