FulcrumSec Claims LexisNexis Cloud Breach, Steals 2GB Data

Cybercriminals claiming affiliation with the threat group FulcrumSec have publicly alleged a breach of LexisNexis Legal Professional's cloud infrastructure, stealing more than 2 gigabytes of data in late February 2025. The intrusion targeted the New York-based company's Amazon Web Services environment, which supports legal research and analytics tools used by law firms, government agencies, and courts across the United States.

LexisNexis Legal Professional, a division of parent company RELX focused on legal and regulatory services, confirmed the unauthorized access but described it as limited in scope. A company spokesperson stated that the breach affected a small number of servers containing mostly legacy data from before 2020, including customer names, user IDs, business contact information, product usage details, respondent IP addresses from surveys, and support tickets. The spokesperson emphasized that the compromised information did not include Social Security numbers, driver's license numbers, financial details, active passwords, customer search queries, client matter information, or contracts. "LexisNexis Legal Professional has investigated a security matter and based on...