GLOBALMalwareManufacturingRetailRansomwareQilinRansom DemandedActor NamedData Leak ThreatenedData ExfiltratedHigh
Lee Enterprises, Incorporated
bd_43d738666169b421 · schema v1 · pii pii-v1
Full breach record for Lee Enterprises, Incorporated →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Qilin on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Group activity: Consumer ServicesClaimed data size: 100 GBDiscovered: 2025-02-27
Source: Ransomware.live
Post text · scraped from the leak site
All data will be published on March 5, 2025. We are preparing to share sensitive data with the public that could shed new light on Lee Enterprises, a prominent newspaper publishing firm active across all U.S. states. The documents we hold ab ...
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_f9aec71de8cc9627SEC 8-Kfiled 2025-02-18(15d gap)Verified by operator
- bd_a2d5ab16cd5f4952SEC 8-Kfiled 2025-03-06(31d gap)Verified by operator
- bd_19ef3d9a34d1e9e3Montana State AGfiled 2025-06-03(120d gap)Verified by operator
- bd_31e8f14655399ee6Oregon State AGfiled 2025-06-04(121d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 122d gap
- bd_7ab185d4c140c40dCalifornia State AGfiled 2025-06-04(121d gap)Verified
- bd_ae0c7ca4d829002bTexas State AGfiled 2025-06-05(122d gap)Verified
Source provenance
- Source URL
- https://www.ransomware.live/id/TGVlIEVudGVycHJpc2VzQHFpbGlu
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 5042e6b2c7a4e1b8081282bce0a9506755d019191091aeda9f21820190e1abcb
Reporting entity
- Name
- qilin
Victim entity
- Name
- Lee Enterprises, Incorporatednorm: lee
- Domain
- lee.net
- Industry
- Manufacturingnaics map
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· qilin
- Threat actor
- QilinExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.