Clustered 7 filings across 6 jurisdictions · filing window Feb 3, 2025 → Jun 5, 2025. View entity profile → Other incidents for this victim →
incident inc_bec6546de8564206 · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Discovery to SEC materiality determination
Materiality determination to SEC 8-K filing
Time between earliest and latest filing
CA FEDERAL MT OR TX
Leak Site · SEC 8-K · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Feb 3, 2025
When the intrusion reportedly occurred, per the linked filings
Feb 3, 2025
Reported by SEC 8-K, CALIFORNIA AG filings
All data will be published on March 5, 2025. We are preparing to share sensitive data with the public that could shed new light on Lee Enterprises, a prominent newspaper publishing firm active across all U.S. states. The documents we hold ab ...
Feb 12, 2025
Registrant determined the incident material — starts the SEC 4-business-day clock
Lee Enterprises disclosed a February 3, 2025 cybersecurity attack causing a systems outage. Threat actors accessed the network, encrypted critical applications, and exfiltrated files. Investigation into PII compromise is ongoing. The incident disrupted print distribution, billing, collections, and vendor payments. Weekly/ancillary products (~5% of revenue) remain unrestored as of February 12, 2025. The Company expects a material financial impact and maintains cybersecurity insurance.
Lee Enterprises filed an 8-K/A (Amendment No. 1) supplementing its February 14, 2025 disclosure of a February 3, 2025 cybersecurity attack in which threat actors accessed its network, encrypted critical applications, and exfiltrated files. The threat has been contained; back-office functions (billing, collections, vendor payments) remain delayed. Investigation into whether PII was taken is ongoing. The Company expects a material financial impact and arranged a $3.7M covenant waiver from BH Finance LLC for liquidity.
May 28, 2025
Reported by OREGON AG, TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Lee Enterprises reported a data breach to the Montana Attorney General. The breach was reported on 2025-06-03. The breach occurred from 02/03/2028 to 02/03/2025. 1,542 Montana residents were affected.
Affected (this filing): 1,542
Lee Enterprises reported a data breach to the Oregon Attorney General. The breach was reported on 2025-06-04. The breach occurred during 2/3/2025. The breach was discovered on 5/28/2025. 39,779 individuals were affected. Notice was sent on 6/3/2025.
Affected (this filing): 39,779
Lee Enterprises notified the California AG of a data security incident affecting employee personal information. Unauthorized access occurred on February 1, 2025, and was first detected on February 3, 2025. The company engaged cybersecurity specialists, notified the FBI, and is offering identity theft protection services to affected individuals. No evidence of misuse was found.
Lee Enterprises based in Davenport, Iowa, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-28 and reported on 2025-06-05. 986 Texas residents were affected. 39,779 individuals affected in total. Types of information involved: Social Security Number Information;Driver’s License number. Consumers were notified via U.S. Mail.
Affected (this filing): 986