FEDERALItem 1.05 · mandatoryMalwareTelecom & MediaInformationNewspapersRansomwareData ExfiltratedData EncryptedRansom DemandedLowActive

Lee Enterprises, Incorporated

bd_f9aec71de8cc9627 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2025

Filed

Feb 18, 2025

To disclose

15 days

Affected

Not disclosed

Linked

13 records

Confidence

83%

Full breach record for Lee Enterprises, Incorporated →

Lee Enterprises disclosed a February 3, 2025 cybersecurity attack causing a systems outage. Threat actors accessed the network, encrypted critical applications, and exfiltrated files. Investigation into PII compromise is ongoing. The incident disrupted print distribution, billing, collections, and vendor payments. Weekly/ancillary products (~5% of revenue) remain unrestored as of February 12, 2025. The Company expects a material financial impact and maintains cybersecurity insurance.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Feb 12, 2025 → Filed Feb 18, 20256d ✓ SEC 4-day OK15 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 15 days

Feb 3, 2025

Begins

Feb 3, 2025

Discovered

Feb 12, 2025

Scope determined

Feb 18, 2025

Filed

This filing is one of 13 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_5237fce167e0e1102025-06-01 · +103dCandidate
Nebraska State AGbd_0dbac1a45d4efc162025-06-03 · +105dVerified
Montana State AGbd_19ef3d9a34d1e9e32025-06-03 · +105dVerified
New Hampshire State AGbd_2ca38f39e16972c82025-06-03 · +105dVerified

Show 6 more filings ↓up to 107d gap

Maine State AGbd_5c4976e1eeef53042025-06-03 · +105dVerified
Vermont State AGbd_76c8276f9ce089732025-06-03 · +105dVerified
Oregon State AGbd_31e8f14655399ee62025-06-04 · +106dVerified
Massachusetts State AGbd_342bdbbebf2f7ed12025-06-04 · +106dVerified
California State AGbd_7ab185d4c140c40d2025-06-04 · +106dVerified
Texas State AGbd_ae0c7ca4d829002b2025-06-05 · +107dVerified

Showing first 10 of 12 linked disclosures.

Name: Lee Enterprises, Incorporated
norm: lee
SEC CIK: 0000058361
Domain: lee.net

Name: Lee Enterprises, Incorporated
norm: lee
SEC CIK: 0000058361
Domain: lee.net
Industry: Telecom & Mediallm
NAICS 513110 · Newspaper Publishers

Discovered: Feb 3, 2025
Breach occurred: Feb 3, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: Feb 12, 2025
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified relevant law enforcementWill notify relevant federal and state regulatory bodies and consumer protection agencies as necessary

During the incident: Activated its incident response team, comprised of internal personnel and external cybersecurity experts
Conducting forensic analysis to determine whether sensitive data or personally identifiable information was compromised
Notified relevant law enforcement about the matter
Will notify relevant federal and state regulatory bodies, and applicable consumer protection agencies, as necessary
Implemented temporary measures, including manual processing of transactions and alternative distribution channels, to maintain critical business functions while systems are being restored
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: SEC 4-day OK · 6d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Feb 12, 2025
→ Filed: Feb 18, 2025
6d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Feb 12, 2025 → Filed: Feb 18, 2025	6d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

SEC 8-KFeb 18 · first · this page

Illinois State AG+103d

Nebraska State AG+105d

Montana State AG+105d

New Hampshire State AG+105d

Maine State AG+105d

Vermont State AG+105d

Oregon State AG+106d

Massachusetts State AG+106d

California State AG+106d

Texas State AG+107d

Pattern: first filing Feb 18, last Jun 5 (TX) — a 107-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/58361/000162828025005855/lee-20250212.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 18, 2025
Raw hash: b15431f0a5b121223d599e117308b76fa21d474397b974b76e83af02d8888b60

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html26.7 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLee Enterprises, Incorporated

Victim entityLee Enterprises, Incorporated

Incidentdiscovered Feb 3, 2025

Stated responseActivated its incident response team, comprised of internal personnel and external cybersecurity experts

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing