LexisNexis says hackers accessed legacy data in contained breach

Information analytics large LexisNexis confirmed that info leaked on a cybercriminal discussion board on Tuesday is reputable and associated to a current safety incident. 

The breach emerged this week when a menace actor claimed they stole 2 GB price of knowledge from the corporate that included thousands and thousands of information, contact info that included .gov electronic mail addresses, account information for presidency businesses and regulation companies, passwords, IT incident tickets and extra. 

A spokesperson for LexisNexis’ Authorized & Skilled division confirmed {that a} menace actor gained entry to a “restricted variety of servers” that contained “largely legacy, deprecated knowledge from previous to 2020, together with info akin to buyer names, person IDs, enterprise contact info, merchandise used, buyer surveys with respondent IP addresses, and help tickets.”

“LexisNexis Authorized & Skilled has investigated a safety matter and primarily based on the investigation and testing we’ve got carried out up to now, we consider the matter is contained. We’ve no proof of compromise of or affect to our services and products,” the spokesperson stated. 

“We engaged a preeminent cybersecurity forensic agency to help in our investigation and response and have reported this problem to regulation enforcement.”

They’ve knowledgeable impacted present and former prospects of the breach, the spokesperson added.

The corporate didn’t reply to additional questions on whether or not a ransom was supplied or when the intrusion was initially found. 

The spokesperson stated the breached knowledge didn’t embrace Social Safety numbers, monetary knowledge or info on what prospects searched.

The hackers claimed within the cybercriminal discussion board submit that the breach was carried out final week. The incident was first reported by BleepingComputer.

LexisNexis is greatest identified for its knowledge and know-how providers, analytics and predictive insights and has places of work throughout Asia and Europe. The Authorized & Skilled department is a big service supplier for regulation companies and governments world wide, with almost 12,000 workers and prospects in 150 nations. 

The corporate’s threat administration providers department LexisNexis Threat Options suffered an enormous knowledge breach final yr that concerned the knowledge of greater than 360,000 individuals. That incident concerned contact info, Social Safety numbers, driver’s license numbers and dates of start. 

Study extra.