In a significant data security incident, LexisNexis Risk Solutions, a major U.S.-based data analytics company, has confirmed a breach that compromised the personal information of more than 300,000 individuals.

The breach originated in December 2024 but only came to light in April 2025, when LexisNexis was notified that a threat actor had stolen company data from a third-party development platform—identified as GitHub, using a compromised employee account. The incident did not impact LexisNexis’ internal networks or systems, the company emphasized.

According to a disclosure filed with the Maine Attorney General’s Office, the breach affected exactly 364,333 individuals. While the types of compromised data varied by individual, they may have included:

  • Full name

  • Contact information, such as:

    • Phone number

    • Postal address

    • Email address

  • Social Security number

  • Driver’s license number

  • Date of birth

Importantly, LexisNexis clarified that no financial or credit card information was accessed or stolen in the breach.

In response to the incident, the company began notifying affected individuals on May 24, 2025. Impacted individuals are being offered two years of complimentary identity protection and credit monitoring services. LexisNexis also urged them to remain vigilant and to monitor their financial accounts and credit reports for any signs of fraud or identity theft.

LexisNexis Risk Solutions is a subsidiary of RELX, a global provider of analytics and decision tools. The company operates in 40 countries, serves customers in over 180, and works with:

  • 85% of the Fortune 500

  • 91% of the Fortune 100

  • 9 of the world’s top 10 banks

This breach underscores the growing cybersecurity risks associated with third-party platforms and developer tools. As companies increasingly rely on external environments for software development, strong access controls, regular audits, and proactive threat detection remain critical for securing sensitive data.

Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news