The Qilin ransomware group targeted Lee Enterprises, causing a substantial data breach. The attackers exfiltrated 350GB, including financial records, journalist payments, and tactics, leading to publication disruptions and subscriber access issues across Lee Enterprises' 79 newspapers. The attack compromised critical applications and encrypted data, severely affecting the company's operations and potentially its reputation. Forensic analysis is underway to assess the extent of sensitive or personally identifiable information compromised. The threat of data leakage looms with a set date for public disclosure.

Lee Enterprises experienced a disruptive cyberattack on February 3, 2025, reported to the SEC. Critical applications were encrypted, and data exfiltration was confirmed. The Qilin ransomware gang claimed responsibility, threatening to release 350GB of sensitive data, including ID scans and financial records, if a ransom is not paid. This situation indicates a significant impact with potential for severe operational disruptions, financial losses, and damage to the company's reputation, alongside the breach of confidential and personal information.