Cyberattack on LexisNexis results in data theft affecting 364,333 individuals, with personal information accessed including names, phone numbers, email addresses, home addresses, SSNs, and driver’s license details.
No sensitive personal information like financial or credit card details were compromised, and the company claims their infrastructure, systems, and products remain secure.
Some are critical of LexisNexis' response timeline, with the breach detected in April 2025, four months after the incident occurred in December 2024, and public disclosure only made in May.
Legal consequences may be significant for LexisNexis due to the breach, as similar incidents have led to regulatory penalties, legal fees, and settlements with victims in the past.