Attackers breached LexisNexis Risk Solutions’ (LNRS) third-party service provider in late 2024, taking the company’s customer details, including Social Security and driver’s license numbers.
LNRS has started contacting individuals impacted by the recent data breach. Early this April, the company learned that on December 25th, 2024, attackers “acquired certain LNRS data from a third-party platform.”
The data analytics firm utilized an unnamed third party for software development purposes.
LNRS is a major player in global data analytics, providing services to corporations and governments alike. The company’s estimated revenue last year was around $8 billion, and it has over 6,000 staff.
“Upon learning of the issue, we promptly launched an investigation with the assistance of leading external cybersecurity experts, notified law enforcement, and took steps to review and further enhance our security controls,” the company said.
After concluding an investigation into the attack, the company found out that personal customer details were impacted. The exposed details may have included:
- Names
- Phone numbers
- Postal or email addresses
- Social Security numbers (SSNs)
- Driver’s license numbers or dates of birth
While LNRS claims there’s no evidence that leaked data has been misused, attackers could exploit the details for various nefarious purposes. One of the most common threats leaked data owners face is identity theft. Moreover, stolen SSNs and driver’s license numbers can be exploited to open fraudulent bank accounts, apply for loans, or file false tax returns.
Information that the company submitted to the Maine Attorney General’s Office indicated that over 364,000 individuals were affected by the third-party hacker attack. LNRS stressed that “no financial or credit card information was affected.”
Your email address will not be published. Required fields are markedmarked