RELX PLC

LexisNexis shuts down services after suspicious activity on servers. LexisNexis: LexisNexis had to take its Diligence, Metabase API, and Newsdesk services offline following unusual activity detected on servers managed by a third-party provider. The company is investigating the incident with the assistance of a forensic cybersecurity firm and is rebuilding the affected systems in a new environment before bringing them back online. LexisNexis also clarified that its services are not related to the Metabase cloud service or the recently mentioned SQL injection vulnerability. Linked ransomware group: fulcrumsec.

LexisNexis is a global information and analytics company headquartered in the United States. It operates in the legal, regulatory, and business intelligence industries, providing research tools, data analytics, and risk management solutions. Its platforms are widely used by legal professionals, law enforcement, and enterprises to access vast databases of legal documents, news, public records, and compliance information.

LexisNexis Risk Solutions (LNRS) notified the Rhode Island Attorney General on May 27, 2025, regarding a data security incident involving a third-party software development platform. On December 25, 2024, an unauthorized third party acquired LNRS data from this platform. LNRS discovered the issue on April 1, 2025. The breach affected 634 Rhode Island residents, exposing names, contact information, Social Security numbers, driver’s license numbers, and dates of birth. LNRS engaged external cybersecurity experts, notified law enforcement, and is providing 24 months of complimentary credit monitoring and identity protection services to affected individuals.

LexisNexis Risk Solutions notified the NH AG that an unauthorized third party acquired data from a third-party software development platform on Dec 25, 2024. LNRS learned of the incident on April 1, 2025. Data included names, contact info, SSNs, driver's licenses, and DOBs. 717 NH residents notified; credit monitoring offered.

LexisNexis Risk Solutions based in Alpharetta, Georgia, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-14 and reported on 2025-05-29. 28,933 Texas residents were affected. 364,333 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Other;Date of Birth. Consumers were notified via U.S. Mail.

LexisNexis Risk Solutions reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-27. 6,222 Massachusetts residents were affected.

LexisNexis Risk Solutions (LNRS) notified affected individuals on May 2, 2025, regarding a data breach involving a third-party software development platform. On December 25, 2024, an unauthorized third party acquired LNRS data from this platform. The incident exposed personal information including names, contact details, Social Security numbers, driver's license numbers, and dates of birth. No financial or credit card data was compromised. LNRS engaged external cybersecurity experts, notified law enforcement, and is offering two years of complimentary identity protection and credit monitoring services.

LexisNexis Risk Solutions (LNRS) notified individuals of a data breach involving a third-party software development platform. Unauthorized access occurred on December 25, 2024, and was discovered on April 1, 2025. Impacted data included names, contact info, SSNs, driver's license numbers, and dates of birth. LNRS engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.

LexisNexis Risk Solutions notified the Iowa AG that an unauthorized third party acquired data from a third-party software development platform on Dec 25, 2024. LNRS learned of the incident on April 1, 2025. Data included names, contact info, SSNs, driver's licenses, and DOBs. 2,359 Iowa residents were notified on May 2, 2025, and offered 2 years of credit monitoring.

LexisNexis Risk Solutions reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-25 and was reported on 2025-05-27. 8,185 Indiana residents were affected. 364,333 individuals affected in total.