LexisNexis Confirms Data Breach After Hackers Leak Files
Summary
LexisNexis confirmed attackers accessed some servers and compromised customer and business information, mostly from before 2020. The company says the matter is contained; hackers’ claims about the access method and data stolen remain unverified.
Key points
- LexisNexis said attackers accessed some servers containing mostly legacy and deprecated data from before 2020.
- The company confirmed exposure of customer names, user IDs, business contact details, survey respondents’ IP addresses and support tickets.
- LexisNexis said the matter is contained and reported no impact to its products or services.
- The company said the affected information did not include active passwords, financial information, Social Security numbers or customer search queries.
- Hackers claimed they exfiltrated more than 2GB and suggested they used React2Shell and improperly secured AWS instances; these claims were not independently confirmed in the article.
Article Details
- Victim Organization
- LexisNexis Legal & Professional
- Incident Type
- Data breach involving unauthorized access to servers; the hackers alleged that they exfiltrated data.
- Data Types Exposed
- Confirmed by LexisNexis: customer names, user IDs, business contact details, IP addresses of customer survey respondents, and support tickets.
- Claimed by the hackers: enterprise account data, employee credentials, software development secrets, and personal information including names, phone numbers, email addresses, and job roles.
- Affected Records
- LexisNexis confirmed that information was compromised but did not specify a record count. The hackers claimed to have obtained millions of records, including personal information on 400,000 people and more than 100 individuals with .gov email addresses.
- Affected Data Size
- The hackers claimed to have exfiltrated more than 2GB of data.
- Operational Impact
- LexisNexis said the accessed servers mostly stored legacy and deprecated data from before 2020, the matter was contained, and it had no evidence of impact to its products or services.
- Ransom Or Extortion
- The hackers said they attempted to extort LexisNexis but were unsuccessful.
- Claim Status
- confirmed