Markovits, Stock & DeMarco, LLC, a law firm experienced in data breach class action litigation, is investigating claims on behalf of victims of a data breach involving data entrusted to LexisNexis.
LexisNexis is the global legal, regulatory, and business information analytics division of RELX Group. The company provides legal and business professionals with access to comprehensive databases of legal documents, news, public records, and analytical tools. A recent cyberattack may have compromised sensitive data belonging to customers, government users, and employees. If you were affected by the LexisNexis data breach, contact us for a free consultation to understand your legal rights and explore potential remedies.
Understanding the LexisNexis Data Breach
In March 2025, an extortion group known as FULCRUMSEC claimed to have breached LexisNexis. According to reports, the threat actors exploited a vulnerable container role to gain widespread access to the company’s AWS infrastructure, bypassing access controls to exfiltrate vast amounts of sensitive corporate, government, and customer data. The alleged breach is significant in scope, potentially affecting hundreds of thousands of users including government officials, attorneys, and commercial customers.1
What Data was Compromised in the LexisNexis Data Breach?
According to the threat actors, the allegedly compromised data includes:
• Full Names
• Email Addresses
• Phone Numbers
• Job Functions
• Passwords (including cleartext passwords found in IT support ticket subject lines)
• Customer Account Records (commercial relationships, product subscriptions, pricing information)
• Government User Accounts (including federal judges, DOJ attorneys, SEC staff, and law clerks)
• AWS Secrets and API Keys
• IP Addresses
The alleged breach reportedly includes approximately 400,000 cloud user profiles, over 21,000 customer account records, 118 government user accounts, and nearly 4 million enterprise data warehouse records. The potential exposure of such sensitive
information leaves those affected vulnerable to identity theft, financial fraud, and other misuse of their personal data.
What Should I do if I was Affected by the LexisNexis Data Breach?
To understand your rights and explore your options in response to the LexisNexis data breach, you can schedule a free, confidential consultation with Attorney Justin C. Walker at Markovits, Stock & DeMarco, LLC. You can reach us through the following channels:
• Call us at (513) 651-3700 • Email us at [email protected]
• Submit a Case Evaluation request through the form on our website
1https://dailydarkweb.net/lexisnexis-investigates-massive-data-breach-by-fulcrumsec/