Major 2025 Data Breach via GitHub Compromise (critical) LexisNexis Risk Solutions (LNRS) disclosed a significant data breach affecting approximately 364,000 individuals. The breach occurred between December 25, 2024, and April 1, 2025, involving a compromised GitHub account. Exposed data included Social Security numbers (SSNs), driver’s license numbers, dates of birth, and contact information. The company faced criticism for a 98-day detection delay and a subsequent 53-day delay in victim notification.. $13.5 Million Settlement for Incorrect Deceased Reports (high) LexisNexis Risk Solutions FL agreed to a $13.5 million class action settlement to resolve allegations that it violated the Fair Credit Reporting Act (FCRA) by incorrectly reporting living consumers as deceased. The lawsuit claimed these inaccuracies caused significant harm to consumers' credit and financial standing.. Daniel’s Law Violation and Credit Freeze Retaliation Lawsuit (high) A class-action lawsuit representing over 18,000 individuals was filed in New Jersey alleging LexisNexis violated Daniel’s Law by failing to remove personal information of government officials upon request. The plaintiffs further alleged that LexisNexis retaliated by 'campaigning to freeze the credit reports' of those who made removal requests and incorrectly reporting them as identity theft victims.. Lawsuit for Illegal Collection and Sale of Personal Data to ICE (high) LexisNexis Risk Solutions was sued by immigration advocates for allegedly violating Illinois law by collecting and combining extensive personal information and selling it to third parties, including U.S. Immigration and Customs Enforcement (ICE). The lawsuit claims these practices pose a grave threat to civil liberties and privacy rights.. French Regulatory Fine for GDPR Transparency Failures (medium) The French data protection authority (CNIL) fined LexisNexis €100,000 for failing to properly inform individuals about how their data was being used. The regulator found that the company did not provide clear information about data collection practices and failed to obtain necessary consent.. Unfair Labor Practice Charges and Leadership No-Confidence Vote (medium) The NewsGuild of New York filed unfair labor practice charges against LexisNexis management at Law360, alleging the company violated labor law by laying off 10% of the newsroom staff (26 members) without negotiation after the contract expired. A majority of the union signed a 'Vote of No Confidence' against VP Teresa Harmon, citing 'antagonistic hardball tactics' and 'callous' handling of healthcare benefits.. Privacy Class Action Over Unauthorized Use of PII for Marketing (medium) A class action lawsuit was filed on behalf of California and Illinois residents alleging LexisNexis used personally identifiable information (PII) without authorization to promote its 'Lexis Personal Records Products.' The complaint claims the company exploited private data to turn a profit through unauthorized advertising.