LexisNexis Legal & Professional

Disclosed Mar 3, 2026Unverified

LexisNexis confirms breach via React2Shell flaw as FulcrumSec leaks files

LexisNexis Legal & Professional confirmed attackers exploited an unpatched React frontend flaw and accessed customer and business data, including about 21,000 customer accounts and roughly 400,000 cloud user profiles, mostly legacy data. FulcrumSec leaked files; no SSNs or financial data were involved.

What is known

People affected	Not stated in the sources we have
Disclosed	Mar 3, 2026
Discovered	Feb 24, 2026
Attack	Hacking
Data exposed	NamesEmailsIP addressesPasswordsMessagesAPI keys
Sector	Data brokers · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newsbleepingcomputer.com

LexisNexis confirms data breach as hackers leak stolen files

Notices filed

TotalMar 3

ResearchCount not stated

Other breaches at LexisNexis Legal & Professional

Identity thieves used stolen passwords to pull data on 316,000 people from AccurintCredential stuffing exposed names, addresses, dates of birth, government IDs and Social Security numbers.Credential stuffing316K affectedData brokersUSMar 10, 2005

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about LexisNexis Legal & Professional