Information dealer LexisNexis Threat Options (LNRS) has simply disclosed a knowledge breach that occurred on the finish of final 12 months, and whereas it does not have an effect on as many people as different latest excessive profile incidents—akin to the DISA hack that included 3.3 million folks’s data—it underscores the ever-present issues with corporations gathering (and profiting off of) person knowledge.
As TechCrunch stories, LexisNexis Threat Options makes use of customers’ private and monetary data to assist companies conduct threat assessments on potential prospects and detect fraudulent transactions. For instance, LexisNexis bought knowledge on automobile driving habits collected by automotive producers to insurance coverage corporations to set premiums, whereas regulation enforcement companies pull knowledge from LexisNexis about suspects. (LexisNexis Threat Options is a subsidiary of the identical company that owns knowledge analytics and analysis agency LexisNexis.)
The LexisNexis hack compromised knowledge collected on 364,333 people, and there is a potential class motion lawsuit brewing over the incident. Here is what you have to know.
What occurred with LexisNexis?
In accordance with the corporate’s submitting with the Maine legal professional basic’s workplace, a knowledge breach passed off on December 25, 2024 however wasn’t found till Could 14, 2025. A 3rd-party platform utilized by LexisNexis was hacked, compromising data which will embrace the next:
-
Identify
-
Telephone quantity
-
Mailing deal with
-
E mail deal with
-
Social Safety quantity
-
Driver’s license quantity
-
Date of delivery
In a letter to affected people, LexisNexis states that no monetary or bank card data was included within the breach, nor has any knowledge been clearly misused (to this point). Few extra particulars in regards to the incident have been disclosed, apart from that not one of the firm’s personal networks or programs have been hacked.
What do you assume to this point?
What customers must do
LexisNexis despatched a discover dated Could 24 to customers whose knowledge might have been compromised, so for those who obtain a letter from LexisNexis Threat Options, do not throw it out. The corporate is providing 24 months of identification safety and credit score monitoring providers via Experian IdentityWorks, and you should enroll on-line by August 31, 2025 utilizing the activation code supplied in your discover.
Affected people may also point out their curiosity in becoming a member of a category motion lawsuit in opposition to LexisNexis via Oklahoma-based agency Abington Cole + Ellery. If you wish to volunteer to be thought of as a category consultant, fill out the net type along with your identify, contact data, and connection to the breach.
Lastly, even for those who do not plan to hitch the category motion swimsuit, it’s best to preserve an eye fixed out for indicators of identification theft. Verify your credit score report—which you’ll be able to request without cost on a weekly foundation—and monitor your accounts for any unauthorized exercise. You may as well freeze your credit score, place a fraud alert, and take different steps to safe your Social Safety quantity so nobody can open accounts or take out debt in your identify.