HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Lee Enterprises, Incorporated
bd_2ca38f39e16972c8 · schema v1 · pii pii-v1
Full breach record for Lee Enterprises, Incorporated →Lee Enterprises notified the NH Attorney General of a data security incident affecting approximately 17 New Hampshire residents. Unauthorized access to employee personal information (names and SSNs) occurred around Feb 1, 2025, detected Feb 3, 2025. Lee engaged cybersecurity experts, notified the FBI, and provided 12 months of credit monitoring.
Leak gap clock⏱ Leak >90d17 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 120 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2ce2dc9ba2bb0879Leak Siteqilinfiled 2025-02-27(96d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_5c4976e1eeef5304Maine State AGfiled 2025-06-03Verified by operator
- bd_76c8276f9ce08973Vermont State AGfiled 2025-06-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/lee-enterprises-20250603.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2025
- Raw hash
- 0cc868f7dce2a675712c3338c4c99c7a3535fc7e9da4fce2d8b58d784e55bf6f
Reporting entity
- Name
- Lee Enterprises, Incorporatednorm: lee
- Domain
- lee.net
Victim entity
- Name
- Lee Enterprises, Incorporatednorm: lee
- Domain
- lee.net
Incident
- Discovered
- Feb 3, 2025
- Materiality determined
- May 28, 2025
- Notification sent
- Jun 3, 2025
- Affected individuals
- 17
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.