LexisNexis services offline due to unusual activity on third-party vendor servers

LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline following the identification of unusual activity on servers managed by an unnamed third-party vendor. The company is investigating the incident with the assistance of a cybersecurity firm and is rebuilding affected systems before restoring services, based on information published by Bleeping Computer.

The unusual activity was detected earlier this week on servers hosted and managed by a third-party vendor, prompting LexisNexis to disconnect from these systems to protect customers and contain the issue. The affected services include Nexis Diligence, a risk research platform; Nexis Metabase API, which provides news and media data feeds; and Nexis Newsdesk, a media monitoring and analytics service. LexisNexis has clarified that its Nexis Metabase API product is not connected to the Metabase Cloud service or a recently disclosed zero-day vulnerability affecting it.

This incident follows previous security challenges for LexisNexis, including a data breach in May 2025 affecting over 364,000 individuals and an incident in March where hackers stole and leaked private files after exploiting a flaw in the company's AWS infrastructure.

Source: Bleeping Computer