Over 360K exposed after Christmas hack at data analytics giant
Attackers breached LexisNexis Risk Solutions’ (LNRS) third-party service provider in late 2024, taking the company’s customer details.
Image by Cybernews.
Attackers breached LexisNexis Risk Solutions’ (LNRS) third-party service provider in late 2024, taking the company’s customer details, including Social Security and driver’s license numbers.
LNRS has started contacting individuals impacted by the recent data breach. Early this April, the company learned that on December 25th, 2024, attackers “acquired certain LNRS data from a third-party platform.”
The data analytics firm utilized an unnamed third party for software development purposes.
LNRS is a major player in global data analytics, providing services to corporations and governments alike. The company’s estimated revenue last year was around $8 billion, and it has over 6,000 staff.
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
“Upon learning of the issue, we promptly launched an investigation with the assistance of leading external cybersecurity experts, notified law enforcement, and took steps to review and further enhance our security controls,” the company said.
After concluding an investigation into the attack, the company found out that personal customer details were impacted. The exposed details may have included:
- Names
- Phone numbers
- Postal or email addresses
- Social Security numbers (SSNs)
- Driver’s license numbers or dates of birth
While LNRS claims there’s no evidence that leaked data has been misused, attackers could exploit the details for various nefarious purposes. One of the most common threats leaked data owners face is identity theft. Moreover, stolen SSNs and driver’s license numbers can be exploited to open fraudulent bank accounts, apply for loans, or file false tax returns.
Information that the company submitted to the Maine Attorney General’s Office indicated that over 364,000 individuals were affected by the third-party hacker attack. LNRS stressed that “no financial or credit card information was affected.”