A recent Securities and Exchange Commission (SEC) filing has confirmed that Lee Enterprises, Inc.(Lee) fell victim to a cybersecurity attack on February 3, 2025, resulting in a significant data breach that disrupted key operations. Impacted individuals are urged to remain vigilant by monitoring financial statements, updating passwords, and staying alert to phishing attempts. For more information, visit our guide on how to protect your information after a data breach and minimize potential harm.
Lee Enterprises Data Breach Details
On February 3, 2025, Lee Enterprises, a major media company, suffered a system outage due to a cyberattack that targeted its IT infrastructure. The company immediately activated its incident response team, consisting of internal personnel and external cybersecurity experts, to assess and contain the breach.
Initial investigations revealed that the attackers unlawfully accessed Lee Enterprises’ network, encrypted critical applications, and exfiltrated specific files. While forensic analysis is ongoing, no conclusive evidence has been found indicating whether sensitive data, including personally identifiable information (PII), was compromised.
Impact on Business Operations
The cyberattack significantly affected the company’s operations, leading to delays in product distribution, billing, collections, and vendor payments. Print publication distribution across Lee’s portfolio was disrupted, and online operations were partially impaired. By February 12, 2025, Lee had restored all core product distributions, but weekly and ancillary publications, which constitute approximately five percent of the company’s total operating revenue, remain impacted. A phased recovery for these products is expected over the next several weeks.
To mitigate further disruptions, Lee has implemented temporary measures, including manual transaction processing and alternative distribution methods, to maintain essential business functions while its systems undergo restoration.
While the full financial impact remains uncertain, the company acknowledges that the breach could materially affect its financial condition and operational results. Lee Enterprises carries cybersecurity insurance, which is expected to cover certain costs related to the attack, including forensic investigations, business interruptions, and potential regulatory penalties, subject to policy limits and deductibles.
Lee Enterprises carries cybersecurity insurance, which is expected to cover certain costs related to the attack, including forensic investigations, business interruptions, and potential regulatory penalties, subject to policy limits and deductibles. The company has not disclosed the exact number of individuals affected.
