LexisNexis Risk Solutions
Disclosed May 27, 20251 year ago364,333 affectedConfirmed
Hacker takes LexisNexis consumer data via GitHub account
Data broker LexisNexis Risk Solutions said an unknown hacker accessed its account on a third-party software development platform (GitHub) around December 25, 2024 and took consumer data including SSNs and driver's license numbers; it learned of it on April 1, 2025.
What is known
| People affected | 364,333 (as reported by the organization) |
|---|---|
| Disclosed | May 27, 2025 |
| Discovered | Apr 1, 2025 |
| Happened | Dec 25, 2024 |
| Attack | Vendor breach |
| Data exposed | Names, Dates of birth, Phone numbers, Addresses, Emails, Social Security numbers, Government IDs |
| Sector | Data brokers · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: LexisNexis Risk Solutionsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: LexisNexis Risk Solutionsatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: LexisNexis Risk Solutionsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: LexisNexis Risk Solutionsjustice.oregon.gov · Official notice | Official notice |
| Data broker giant LexisNexis says breach exposed personal information of over 364,000 peopletechcrunch.com · News | News |
| Data broker LexisNexis discloses data breach affecting 364,000 peoplebleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-05-27 LexisNexis Risk Solutions Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: LexisNexis Risk Solutionsin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 27, 2025 | |
| Washington AGresidents of WA | May 27, 2025 | 17,430 |
| Delaware DOJresidents of DE | May 27, 2025 | 1,393 |
| Oregon DOJresidents of OR | May 27, 2025 | 364,333 |
| Researchtotal | May 27, 2025 | 364,333 |
| Vermont AGresidents of VT | May 27, 2025 | |
| Indiana AGresidents of IN | May 27, 2025 | 8,185 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-05-27-lexisnexis-risk-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to data · seed source
- 2026-09-25 · attack: hacking to third-party · seed source
- 2026-09-25 · data_types: ["names"] to ["names","dob","phone","addresses","emails","ssn","government-id"] · seed source
- 2026-09-25 · summary: empty to Data broker LexisNexis Risk Solutions said an unknown hacker accessed its account on a third-party software development platform (GitHub) around December 25, 2024 and took consumer data including SSNs and driver's license numbers; it learne · seed source
- 2026-09-25 · title: empty to Hacker takes LexisNexis consumer data via GitHub account · seed source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 364333 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-04-01 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.