Archive — US — techcrunch
Data broker giant LexisNexis says breach exposed personal information of over364,000 people
LexisNexis disclosed a data breach affecting over 364,000 individuals after a hacker accessed sensitive personal information from a third-party platform, dating back to December 25, 2024. The breach was reported on April 1, 2025, revealing that various personal data, including Social Security numbers, was stolen. The incident raises concerns amidst ongoing debates over data broker regulations.
Key points
- LexisNexis Risk Solutions experienced a data breach affecting over 364,000 people.
- The breach allowed access to sensitive personal information stored in a third-party platform.
- Involved data includes names, Social Security numbers, and driver’s license numbers.
- The breach originated from an unknown hacker gaining access to the company’s GitHub account.
- A report was received on April 1, 2025, about the hack but no ransom demand was disclosed.
- Data brokers like LexisNexis are integral to a multi-billion dollar industry profiting from personal data sales.
- The Trump administration recently rolled back proposed restrictions on data brokers despite privacy advocacy.
Why it matters
- The breach highlights ongoing concerns about personal data privacy amidst increasing digital threats.
- There are historical tensions between data security and the profit motives of data brokers.
- The rollback of regulations aligns with trends in 2025 regarding data privacy and consumer protection.
The LexisNexis breach underscores the vulnerabilities within the data brokerage industry and the need for more stringent personal data protection regulations as debates over privacy laws continue.