Gannett Company, Inc.

Gannett Company, Inc. reported a data breach affecting California residents. On March 30, 2017, Gannett discovered a phishing attack compromised HR department Office 365 credentials. The attacker used these credentials to send further phishing emails and attempted a fraudulent wire transfer. While no sensitive data acquisition was confirmed, employee PII (names, SSNs, DOB, bank details, salary) was potentially accessible. Gannett locked accounts, conducted forensic investigations, notified law enforcement, and provided 12 months of AllClear ID identity protection to affected individuals.