LexisNexis Data Breach Exposes Sensitive Information of 364,000 Individuals LexisNexis Risk Solutions, a major data brokerage firm, confirmed that a cyberattack on its GitHub account over the Christmas holiday led to the theft of personal data belonging to over 364,000 individuals. The breach, carried out by an unidentified hacker, resulted in the exfiltration of sensitive details, including names, birthdates, Social Security numbers, phone numbers, postal and email addresses, and driver’s license numbers. According to LexisNexis spokesperson Jennifer Richman, the company’s GitHub repository—used for software development—was compromised, though further details about the intrusion remain unclear. The incident follows an earlier claim in April that an unknown third party had breached LexisNexis, though the connection between the two events is not yet confirmed. The breach occurs amid regulatory uncertainty, as a proposed Biden administration rule aimed at restricting data brokers from selling personal and financial data was scrapped under the Trump administration. Acting Consumer Financial Protection Bureau Director Russell Vought dismissed the need for federal privacy regulations for data brokers, leaving oversight gaps in the industry. The full impact of the breach and potential misuse of the stolen data remains under investigation.