Lee Enterprises

Lee Enterprises experienced a disruptive cyberattack on February 3, 2025, reported to the SEC. Critical applications were encrypted, and data exfiltration was confirmed. The Qilin ransomware gang claimed responsibility, threatening to release 350GB of sensitive data, including ID scans and financial records, if a ransom is not paid. This situation indicates a significant impact with potential for severe operational disruptions, financial losses, and damage to the company's reputation, alongside the breach of confidential and personal information.

Source: https://www.bleepingcomputer.com/news/security/qilin-ransomware-claims-attack-at-lee-enterprises-leaks-stolen-data/

TPRM report: https://scoringcyber.rankiteo.com/company/lee-enterprises

"id": "lee243030225",
"linkid": "lee-enterprises",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'name': 'Lee Enterprises', 'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Confirmed',
                 'personally_identifiable_information': 'ID scans',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['ID scans', 'financial records']},
 'date_detected': '2025-02-03',
 'description': 'Lee Enterprises experienced a disruptive cyberattack on '
                'February 3, 2025, reported to the SEC. Critical applications '
                'were encrypted, and data exfiltration was confirmed. The '
                'Qilin ransomware gang claimed responsibility, threatening to '
                'release 350GB of sensitive data, including ID scans and '
                'financial records, if a ransom is not paid. This situation '
                'indicates a significant impact with potential for severe '
                'operational disruptions, financial losses, and damage to the '
                "company's reputation, alongside the breach of confidential "
                'and personal information.',
 'impact': {'brand_reputation_impact': "Significant damage to the company's "
                                       'reputation',
            'data_compromised': ['ID scans', 'financial records'],
            'identity_theft_risk': 'High',
            'operational_impact': 'Severe operational disruptions',
            'payment_information_risk': 'High',
            'systems_affected': ['Critical applications']},
 'motivation': 'Financial Gain',
 'ransomware': {'data_encryption': 'Confirmed',
                'data_exfiltration': 'Confirmed',
                'ransomware_strain': 'Qilin'},
 'references': [{'source': 'SEC Report'}],
 'threat_actor': 'Qilin Ransomware Gang',
 'title': 'Lee Enterprises Ransomware Attack',
 'type': 'Ransomware Attack'}