United States
USA
Lee Enterprises cyberattack delays newspaper distribution and business processes
On 3 February 2025, threat actors accessed Lee Enterprises' network, encrypted critical applications and exfiltrated files. Lee told the SEC that the incident delayed print distribution, partially limited online operations, and disrupted billing, collections and vendor payments; some business processes remained delayed into March.
82
Estimated severity
82 / 100
98
Source reliability
98 / 100
Approximate Date
03/02/2025
Targeted Company
LEE ENTERPRISES
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Inventory or distribution impactOperational disruptionOrder fulfillment or delivery disruptionService degradation
Affected sectors
Media & Entertainment
Affected departments
AccountingDistribution & FulfillmentInformation Technology
Attack Profile
Attack types
Data exfiltrationUnauthorized access
Attributed threat actors
QILIN
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/58361/000162828025005855/lee-20250212.htmsec.govhttps://www.sec.gov/Archives/edgar/data/58361/000162828025010944/lee-20250212.htmtechcrunch.comhttps://techcrunch.com/2025/02/18/as-us-newspaper-outages-drag-on-lee-enterprises-blames-cyberattack-for-encrypting-critical-systems/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/lee-enterprises-newspaper-disruptions-caused-by-ransomware-attack/