• by Ray Schultz , Yesterday

Publisher Lee Enterprises is facing scrutiny on two fronts with regard to the cyberattack it suffered in February. 

Montana Attorney General Austin Knudsen has launched an investigation into the incident, saying that companies collecting data on consumers must “do so responsibly and comply with all applicable laws.”

Lee reported earlier this month that personal data was exposed on 39,779 individuals, including their first and last names and social security numbers. 

Knudsen demands that Lee identify the type of information it  collects from customers and for what purpose it is used. The state also wants to know how and when the company notified customers.

Lee has one month to respond to Knudsen’s Civil Investigative Demand. 

In Montana, Lee Enterprises owns the Billings Gazette, Helena Independent Record, Missoulian, Montana Standard, and Ravalli Republic.

In a separate development pertaining to the incident, three current or former employees have filed suit in Iowa, claiming their data was exposed to cyber criminals. 

Lee is accused of negligence, breach of an implied contract, unjust enrichment and invasion of privacy, KWOC reports.  The three cases each seek class-action status and damages, KWOC adds.

In Iowa, Lee operates the Quad-City Times,  the Sioux City Journal, the Mason City Globe-Gazette, the Waterloo-Cedar Falls Courier and the Muscatine Journal, the report continues.

The cases are on file with the U.S. District Court for the Southern District of Iowa. 

Lee has paid $2 million in recovery costs related to the ransomware attack.