LexisNexis Legal & Professional Division Confirms Data Breach Following Cybercriminal Claims

Data analytics giant LexisNexis has confirmed its Legal & Professional division suffered a data breach, following claims by the Fulcrumsec cybercrime crew. The breach reportedly involved customer records. The cybercriminals claim to have exfiltrated 2 GB of data from an AWS instance using a 'React2Shell' exploit. LexisNexis acknowledged the incident, stating that some customer records were affected. The company is investigating the breach and notifying impacted customers. The confirmation comes days after the cybercrime group publicly took responsibility for the hack, highlighting a potential vulnerability in cloud infrastructure. The incident raises concerns about data security within legal and professional services sectors that handle sensitive client information.