Living Room Theaters
Living Room Theaters Cyberattack
Summary
Living Room Theaters said a Nov. 13, 2025, cyberattack made most of its computers unusable and closed its Portland and Indianapolis cinemas. Box office transactions and refunds were affected; Portland reopened Nov. 21.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Unknown cyber mechanism
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Payment processing disruption
The organization could not process, receive, issue, reconcile, or record payments normally.
-
Facility closure
One or more offices, schools, clinics, stores, plants, branches, or other facilities closed because of the incident.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
Living Room Theaters reported a cyberattack on Nov. 13, 2025, that made most company computers unusable. The company’s account supports confirmed cyber involvement but does not identify a specific mechanism, ransomware group or intrusion path. Both of its cinemas were affected.
Operational significance
The Portland, Oregon, and Indianapolis, Indiana, locations closed, preventing scheduled screenings, box office transactions and refunds. The company said it would help customers obtain refunds after systems were restored. The interruption directly affected in-person entertainment services in two cities. The available reporting does not establish that patrons’ payment data was accessed or that other theaters or retail businesses were affected.
Current status
Local reporting said the Portland cinema reopened Friday, Nov. 21, ending a closure of more than a week. The reviewed sources do not independently establish the exact Indianapolis reopening date or complete system restoration. The confirmed end of Portland’s closure and elapsed time support a presumed resolved status pending a fuller company update.
Confidence and uncertainty
Confidence is high that a cyberattack disabled computer systems and closed both cinemas because the company said so. The method, attacker identity, data access, ransom demand, payment and full recovery sequence remain unconfirmed. The business operates in two states, so both physical places are linked; this does not imply geographic outages beyond the two venues. A fresh claim-index search found no matching listing, which does not establish absence of a private demand.
Organizations involved
Impacted locations
Sources
A cyberattack late Thursday, Nov. 13, forced Living Room Theaters to halt operations at its cinemas in Portland, Oregon, and Indianapolis, with no reopening estimate, the company said Saturday.
Living Room Theaters in Portland reopened Friday, ending more than a weeklong closure after a disruptive cyber attack affected both its Portland and Indianapolis locations.
See something that needs correction?
Signed-in members can report an error, update, or missing source.