LexisNexis Legal & Professional has confirmed a data breach after a threat actor named FulcrumSec leaked approximately 2GB of stolen files on underground forums on March 3, 2026.

Key Details of the March 2026 Breach

• The Incident: Hackers exfiltrated 2.04 GB of structured data from LexisNexis’s AWS infrastructure.
• Method of Attack: The threat actor exploited a vulnerable React container to gain access to AWS Secrets Manager, Redshift tables, and VPC database tables.
• Scope of Impact: The leak reportedly includes:
  • 3.9 million database records and 21,042 customer accounts.
  • 400,000 cloud user profiles containing names, emails, and phone numbers.
  • Sensitive data belonging to 118 .gov users, including federal judges and DOJ attorneys.
• LexisNexis Response: The company stated that the breach did not include highly sensitive PII like Social Security numbers or bank accounts. They have engaged external experts and notified law enforcement.

Previous Major Incident (2024–2025)

This follows a separate, significant breach that occurred on December 25, 2024, which was only discovered months later.

• Impact: That earlier incident affected approximately 364,000 individuals.
• Data Stolen: Unlike the 2026 leak, the 2024 incident did expose Social Security numbers and driver’s license numbers.
• Vulnerability: It was traced back to a compromised GitHub account.