LexisNexis Confirms Hackers Accessed Servers Holding Mostly Pre-2020 Data
Summary
LexisNexis confirmed a threat actor accessed a limited number of servers holding mostly pre-2020 data. The company says the matter is contained; claims of 2 GB stolen and millions of records came from a cybercriminal forum.
Key points
- LexisNexis confirmed a threat actor accessed a limited number of servers containing mostly legacy data from before 2020.
- The company said the data included customer names, user IDs, business contact details, product usage information, surveys and support tickets.
- A cybercriminal-forum post claimed 2 GB of data and millions of records were stolen; LexisNexis confirmed the posted information was legitimate.
- LexisNexis said it believes the matter is contained and has no evidence its products or services were affected.
- The company said the data did not include Social Security numbers, financial data or customers’ search histories.
- LexisNexis said it engaged a forensic firm, notified impacted current and former customers, and reported the incident to law enforcement.
Article Details
- Victim Organization
- LexisNexis Legal & Professional
- Incident Type
- Unauthorized access to a limited number of servers and exposure of data. A threat actor claimed to have stolen the data.
- Data Types Exposed
- Customer names
- User IDs
- Business contact information
- Product usage details
- Customer survey responses and respondent IP addresses
- Support tickets
- Affected Records
- The threat actor claimed the data included millions of records; LexisNexis described the incident as involving data on a limited number of servers.
- Affected Data Size
- The threat actor claimed to have stolen 2 GB of data.
- Operational Impact
- LexisNexis said the matter was contained and reported no evidence of compromise or impact to its products and services. It engaged a cybersecurity forensic firm, notified impacted current and former customers, and reported the incident to law enforcement.
- Ransom Or Extortion
- Unknown. The company did not respond to questions about whether a ransom was offered.
- Claim Status
- confirmed
Vendors
Industries
Data analyticsData analytics firm LexisNexis confirmed that information posted on a cybercriminal forum is legitimate and related to a recent security incident in which a threat actor accessed a limited number of servers containingGovernmentmillions of records, contact information that included .gov email addresses, account records for government agencies and law firms, passwords, IT incident tickets and more.