Gannett Data Breach
The 2026 Gannett data breach was a security incident that may have affected name and Social Security number information held by Gannett Satellite Information Network, LLC. Massachusetts' official record lists one affected resident in the state.
This classification is based on a reviewed lower bound; the actual impact and severity may be higher.
Exposed Data Types
2- Names
- Social security numbers
About This Breach
Because no definitive nationwide total has been disclosed, one person is presented as the verified lower bound.
Gannett Satellite Information Network is a legal entity within the media group that operates USA TODAY and numerous local news brands. Although the group's current corporate brand is USA TODAY Co., the official consumer notice uses the Gannett Satellite Information Network name.
What Is Known About the Incident?
In a letter dated July 22, 2026, the company said personal information may have been involved in an incident. Its investigation confirmed that attempted payroll direct-deposit changes were not completed. Because the incident and discovery dates and access method were not disclosed, the record is not attributed to a specific attack type.
What Information Was Affected?
The public notice says names and Social security numbers may have been involved. Massachusetts' 2026 report also marks Social security numbers; it does not mark medical records, financial accounts, driver's licenses, or credit and debit card numbers. The notice does not state that the information was definitively misused.
How Did the Company Respond?
Gannett said it investigated, confirmed that the attempted payroll changes were not completed, and took steps intended to prevent a recurrence. Affected people were offered 24 months of complimentary IDX credit monitoring and identity protection. The enrollment code remains valid through December 1, 2027, while the letter encourages enrollment within its first 60 days.
What Should Affected People Do?
Notice recipients should use the IDX enrollment code only through the link or phone number in the official letter. If an SSN was involved, credit reports and payroll account details can be monitored, and a free credit freeze or fraud alert may be appropriate. Unexpected messages requesting payroll changes should be separately verified through a known employer contact channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
