LexisNexis Risk Solutions risk.lexisnexis.com LexisNexis Risk Solutions data breach: what happened and what to do
An unauthorized party took LexisNexis Risk Solutions data on December 25, 2024 from a third-party software development platform. The company learned of it in 2025. 364,333 people were affected, with names, contact details, Social Security and driver's license numbers possibly involved.
View all 13,177 breaches- Breach date
- 25 Dec 2024
- Affected
- 364,333
- Data exposed
- Names, Phone numbers, Physical addresses, Email addresses, Social security numbers, Driver's licenses, Dates of birth
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
LexisNexis Risk Solutions (LNRS) sells risk and identity data to insurers, lenders and other businesses, so many people in this breach have no direct relationship with it.
What happened
Its notice letter says an unauthorized third party acquired certain LNRS data on December 25, 2024, from a third-party platform used for software development. LNRS says it learned of this on April 1, 2025, and that its own networks and systems weren't affected. A Maine filing lists a different discovery date, May 14, 2025, and classes it as an external system breach (hacking).
Sources checked: oag.ca.gov, consumer.ftc.gov, identitytheft.gov
Last verified against the official page:
Who and what
LNRS told Maine regulators that 364,333 people were affected, 661 of them in Maine. What was taken varies by person. It could include a name, contact information such as a phone number, postal or email address, a Social Security number, a driver's license number or a date of birth. The letter says no financial or credit card information was affected.
The company's response
LNRS says it investigated with outside cybersecurity experts and notified law enforcement. It is offering 24 months of Experian IdentityWorks to affected people.
Social Security and driver's license numbers are the data that matter most here. They let criminals open accounts or file claims in your name, so a freeze is the step with the most effect.
What to do if you were in it
- 1
Freeze your credit
A credit freeze is free and doesn't affect your score. Place one at Equifax, Experian and TransUnion, as the FTC explains. Then check your reports at annualcreditreport.com for accounts you don't recognize.
- 2
Take the free identity protection
If you got a letter, it explains how to enroll in the 24 months of Experian IdentityWorks. The FTC advises accepting free monitoring after a breach.
- 3
Watch for scams that mention the breach
Phone numbers and addresses can be used for phishing and smishing. Don't click links in unexpected messages; go to the company's site yourself.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone appears in this and other breaches. Serus can't remove breach data, but it alerts you when your details show up in a new one.
- 5
Report misuse
If someone uses your details, report it at IdentityTheft.gov to get a personal recovery plan.
Official filings
- Washington Attorney General , filed 27 May 2025 : 17,430 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the LexisNexis Risk Solutions breach?
LNRS notifies affected people by letter. 364,333 people were affected. If you didn't get a letter, freezing your credit is still a sensible step.
What was exposed?
Depending on the person: name, contact information, Social Security number, driver's license number or date of birth. The letter says no financial or credit card information was affected.
Should I change my password?
The notice doesn't mention passwords. Focus on a credit freeze and on watching your accounts.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
