FEDERALItem 1.05 · mandatoryMalwareTelecom & MediaInformationNewspapersRansomwareData ExfiltratedData EncryptedDelayed DiscoveryLowContained

Lee Enterprises, Incorporated

bd_a2d5ab16cd5f4952 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2025

Filed

Mar 6, 2025

To disclose

4 weeks

Affected

Not disclosed

Linked

14 filings

Confidence

88%

Full breach record for Lee Enterprises, Incorporated →

Lee Enterprises filed an 8-K/A (Amendment No. 1) supplementing its February 14, 2025 disclosure of a February 3, 2025 cybersecurity attack in which threat actors accessed its network, encrypted critical applications, and exfiltrated files. The threat has been contained; back-office functions (billing, collections, vendor payments) remain delayed. Investigation into whether PII was taken is ongoing. The Company expects a material financial impact and arranged a $3.7M covenant waiver from BH Finance LLC for liquidity.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Feb 14, 2025 → Filed Mar 6, 202520d ✗ SEC 4-day late4 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 4 weeks / 31 days

Feb 3, 2025

Begins

Feb 3, 2025

Discovered

Feb 14, 2025

Scope determined

Mar 6, 2025

Filed

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_5237fce167e0e1102025-06-01 · +87dCandidate
Nebraska State AGbd_0dbac1a45d4efc162025-06-03 · +89dVerified
Montana State AGbd_19ef3d9a34d1e9e32025-06-03 · +89dVerified
New Hampshire State AGbd_2ca38f39e16972c82025-06-03 · +89dVerified

Show 6 more filings ↓up to 91d gap

Maine State AGbd_5c4976e1eeef53042025-06-03 · +89dVerified
Vermont State AGbd_76c8276f9ce089732025-06-03 · +89dVerified
Oregon State AGbd_31e8f14655399ee62025-06-04 · +90dVerified
Massachusetts State AGbd_342bdbbebf2f7ed12025-06-04 · +90dVerified
California State AGbd_7ab185d4c140c40d2025-06-04 · +90dVerified
Texas State AGbd_ae0c7ca4d829002b2025-06-05 · +91dVerified

Showing first 10 of 13 linked disclosures.

Name: Lee Enterprises, Incorporated
norm: lee
SEC CIK: 0000058361
Domain: lee.net

Name: Lee Enterprises, Incorporated
norm: lee
SEC CIK: 0000058361
Domain: lee.net
Industry: Telecom & Mediallm
NAICS 513110 · Newspaper Publishers

Discovered: Feb 3, 2025
Breach occurred: Feb 3, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: Feb 14, 2025
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Working closely with third-party security vendors to restore automation of its business processes impacted by the Incident
Conducting investigation and forensic analysis to determine whether personally identifiable information was taken
Agreed with lender BH Finance LLC to waive interest and lease payments due in March 2025 to provide $3.7M of short-term liquidity for remediation
Changes made: Contained the threat through remediation activities
Restoring automation of business processes with third-party security vendors
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: SEC 4-day late · 20d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Feb 14, 2025
→ Filed: Mar 6, 2025
20d cal. 4 business days SEC 4-day late

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Feb 14, 2025 → Filed: Mar 6, 2025	20d cal.	4 business days	SEC 4-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

SEC 8-KMar 6 · first · this page

Illinois State AG+87d

Nebraska State AG+89d

Montana State AG+89d

New Hampshire State AG+89d

Maine State AG+89d

Vermont State AG+89d

Oregon State AG+90d

Massachusetts State AG+90d

California State AG+90d

Texas State AG+91d

Pattern: first filing Mar 6, last Jun 5 (TX) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/58361/000162828025010944/lee-20250212.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Mar 6, 2025
Raw hash: 59a63ad4ece288c55d6f059c8251d3037d34f793cdf306a032089cd9c46fbff2

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html29.2 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLee Enterprises, Incorporated

Victim entityLee Enterprises, Incorporated

Incidentdiscovered Feb 3, 2025

Stated responseWorking closely with third-party security vendors to restore automation of its business processes impacted by the Incident

ComplianceSEC 4-day late

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing