LexisNexis hack leaks legacy data and customer records
LexisNexis's legal and professional information division was breached, resulting in unauthorised access to legacy data and some customer records. The attackers published stolen files and claimed to have also accessed data on government and law firm users. LexisNexis said it had confirmed the breach and contained the threat.
Key facts
- Affected organisation
- LexisNexis
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Legacy data and some customer records leaked
- Cause / method
- Exploitation of the React2Shell vulnerability in a cloud environment
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- As the attackers published stolen files, LexisNexis confirmed unauthorised access to legacy data and that the breach had been contained.
- Some customer records in the legal and professional information division were affected, and the attackers claimed to have stolen 2.04GB of data.
- The attack method, in which legacy data was exposed through exploitation of the React2Shell vulnerability in an AWS cloud environment, was made public.
13 related reports
- LexisNexis says hackers accessed legacy data in contained breach
- LexisNexis Investigates Breach, Customer Data Access
- LexisNexis confirms data breach as hackers leak stolen files
- LexisNexis Says Data Breach Has Been Cointained; Hackers Claim Access to Government and Law Firm User Data
- New LexisNexis Data Breach Confirmed After Hackers Leak Files
- LexisNexis confirms data breach at Legal & Professional arm, some customer records affected
- LexisNexis Data Breach: Threat Actor Claims Theft of 2.04 GB of Data
- LexisNexis Confirms Data Breach, Says Threat Is Contained
- LexisNexis AWS Data Breach 2026: React2Shell Exploit Exposes Legacy Data in Cloud Hack
- LexisNexis confirms data breach after hackers leak files
- LexisNexis Faces Server Breach Impacting Legacy Data
- LexisNexis hit by second data breach in two years
- LexisNexis data breach leads to leak of stolen files
Other incidents at LexisNexis
LexisNexis suspends three services over unusual server activity
Impact: Suspension of Diligence, Metabase API and Newsdesk services
LexisNexis detected abnormal activity on servers hosted and managed by an outside supplier. The company suspended the Diligence, Metabase API and Newsdesk services. It said the incident is a third-party security incident separate from the previously reported Metabase zero-day attacks.
Read on BleepingComputer ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.