Introduction
LexisNexis has recently taken several of its services offline due to unusual activity on servers managed by a third-party vendor. The company is currently investigating and rebuilding affected systems in a new environment before bringing the services back online. This guide provides a detailed overview of the incident and the steps LexisNexis is taking to address the issue.
Background on LexisNexis Services
LexisNexis provides a range of services including Diligence, Metabase API, and Newsdesk. Diligence is a due diligence and risk research platform used by compliance professionals, while Metabase API provides news and media data feeds for integration into enterprise systems. The Nexis Newsdesk service is used by communications, public relations, and marketing teams.
Incident Overview
Earlier this week, LexisNexis identified unusual activity on servers hosted by a third-party vendor. The company immediately disconnected from those third-party systems to protect its customers and contain the issue at its source. The company is currently working with a cybersecurity forensic firm to review and remediate the situation.
Investigation and Response
LexisNexis is currently investigating the incident and rebuilding affected systems in a new environment. The company is working with a preeminent cybersecurity forensic firm to review and remediate the situation. The company has stated that the services were taken down due to suspicious activity on vendor servers.
Related Incidents
In May 2025, LexisNexis disclosed a cybersecurity incident in which hackers stole the personal data of 364,000 individuals after gaining unauthorized access to its private GitHub repositories. In March, LexisNexis was targeted by the threat actor 'FulcrumSec' after exploiting the 'React2Shell' flaw in the company's AWS infrastructure to steal and later leak private files.
Steps Taken by LexisNexis
LexisNexis is currently investigating the incident and rebuilding affected systems in a new environment. The company is working with a cybersecurity forensic firm to review and remediate the situation. The company has stated that the services were taken down due to suspicious activity on vendor servers.
Conclusion
LexisNexis is taking proactive steps to address the issue and ensure the security of its services. The company is currently rebuilding affected systems in a new environment and working with a cybersecurity forensic firm to review and remediate the situation. The company is committed to maintaining the security and integrity of its services and is taking steps to prevent similar incidents from occurring in the future.