Breachesby GlyphLee Enterprises
Disclosed Feb 7, 202539,779 affectedConfirmed
Qilin ransomware attack cripples Lee newspapers, exposes staff SSNs
A February ransomware attack claimed by Qilin encrypted critical systems at newspaper publisher Lee Enterprises, disrupting printing at dozens of outlets for weeks; Lee later told Maine's attorney general that data of 39,779 people, mostly employees, was stolen.
What is known
| People affected | 39,779 (as reported by the organization) |
|---|---|
| Disclosed | Feb 7, 2025 |
| Discovered | May 28, 2025 |
| Happened | Feb 3, 2025 |
| Attack | Ransomware |
| Data exposed | NamesSocial Security numbersEmployment |
| Sector | Media · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Lee EnterprisesOregon DOJ breach notice: Lee EnterprisesLEE ENTERPRISES, Inc Form 8-K/A, Item 1.05 (2025-03-06)LEE ENTERPRISES, Inc Form 8-K, Item 1.05 (2025-02-18)Media giant Lee Enterprises confirms cyberattack as news outlets report ongoing disruptionData breach at newspaper giant Lee Enterprises affects 40,000 peopleVermont Attorney General: 2025-06-03 Lee Enterprises Data Breach Notice to Consumers
Notices filed
History of this record
empty to https://ago.vermont.gov/document/2025-06-03-lee-enterprises-data-breach-notice-consumersby backfillSource
other to mediaby seedSource
unknown to ransomwareby seedSource
[] to ["names","ssn","employment"]by seedSource
empty to organizationby seedSource
empty to 39779by seedSource
2025-02-18 to 2025-02-07by seedSource
empty to A February ransomware attack claimed by Qilin encrypted critical systems at newspaper publisher Lee Enterprises, disrupting printing at dozens of outlets for weeks; Lee later told Maine's attorney general that data of 39,779 people, mostly by seedSource
Updated SEC filing on a material cybersecurity incident to Qilin ransomware attack cripples Lee newspapers, exposes staff SSNsby seedSource
2025-03-06 to 2025-02-18by backfillSource
2025-06-04 to 2025-03-06by backfillSource
empty to Updated SEC filing on a material cybersecurity incidentby backfillSource
empty to 2025-05-28by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.