LexisNexis blames outage on ‘unusual server activity’
Jump to main content
Search
REG AD
off-prem
LexisNexis pulls three services offline after suspicious server activity
Customers say issues began Wednesday and still not resolved
Connor Jones
Connor<br>Jones
Cybersecurity reporter
Published<br>mon 10 Aug 2026 // 17:15 UTC
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline last week after detecting "unusual activity on servers that are hosted and managed by a third-party vendor."<br>Non-public customer communications penned by Todd Larsen, president of Nexis Solutions, and seen by The Register, said the company took the decision to protect customers by "containing the issue at its source" and "disconnecting from those third-party systems."<br>"While this decision resulted in those applications going offline, it was the right step to take to ensure the integrity of our own environment and protect our customers and data while our investigation continues," said Larsen.
REG AD
"Our investigation is ongoing, and we are working with a preeminent cybersecurity forensic firm on review and remediation."
REG AD
Customers told us the outage began on Wednesday and remained ongoing.<br>According to a customer update sent on Monday morning, Diligence returned over the weekend, although LexisNexis was still restoring its full content catalog.<br>Newsdesk and Metabase API were expected "to come back online progressively over the course of the day," the update said.<br>"This timing is subject to successful testing, and we will keep you informed of any changes."<br>One source said they would be seeking compensation from LexisNexis owing to the service disruption.<br>"Businesses like mine pay tens of thousands of pounds a year for these services, and rely on them to serve their own clients," they said. "We will be going after them for compensation, and I expect this will end up costing them millions and millions."<br>Nexis Diligence is a tool for employers to run background and compliance checks on individuals and entities, while Newsdesk is a news-monitoring service. LexisNexis Metabase API supplies near-real-time news and social media content for ingestion into customers' applications. Despite the name, it is unrelated to the Metabase business intelligence platform.
MORE CONTEXT
LexisNexis confirms data breach at Legal & Professional arm, some customer records affected
Attack on LexisNexis Risk Solutions exposes data on 300k +
Framework loses customer data in Metabase zero-day attack
Britain's cloud habit has become a billion-pound risk
A LexisNexis spokesperson confirmed that the outage was not connected to the critical SQL injection flaw disclosed by Metabase on August 6. That separate vulnerability, rated CVSS 10.0 but not yet assigned a CVE, has already been linked to at least one confirmed breach at laptop maker Framework.
REG AD
The company told The Reg: "Last week, we identified unusual activity on servers that are hosted and managed by a third-party vendor. Our investigation is ongoing, and we are working with a preeminent cybersecurity forensic firm on review and remediation.
It added: "Nexis Solutions is not a Metabase Cloud customer, and the Nexis Metabase API product has no connection to Metabase Cloud or the reported vulnerability."<br>LexisNexis did not answer our questions about the nature of the "unusual activity" it reported, nor whether any data was compromised during this time.<br>The company's Legal & Professional division was targeted by Fulcrumsec earlier this year, leading to a breach of customer records.<br>The attackers used the React2Shell vulnerability to break in and steal what LexisNexis said was "mostly legacy, deprecated data from prior to 2020."<br>A year earlier, on April Fool's Day, LexisNexis discovered a breach at its Risk Solutions arm that compromised data belonging to around 360,000 people. ®
off-prem
REG AD
ai and ml
Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list
What wouldst thou ask of the monkey's paw?
off-prem
LexisNexis pulls three services offline after suspicious server activity
Customers say issues began Wednesday and still not resolved
devops
Platform Engineering 2.0: your platform was built for a different era. AI just exposed it
PARTNER CONTENT: Platform engineering won the argument. Now it has to grow up fast and evolve for the AI era.
ON-PREM
As datacenters expand, so does public opposition to them
Bans on new server farm projects spread across the US, while plans meet with protests in the UK
COLUMNISTS
Smart glasses are only smart if we train them to be good. Then they'll be fantastic
Just add smart humans – and a pinch of dog
SECURITY
Attackers pick Levi's pockets in social engineering attack
Crims talked their way onto three employee PCs before trousering corporate data
MOST POPULAR
security
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
AI and ML
AMD acquires AI...