World news and discussion on TalkFuse.
LexisNexis pulls three services offline after suspicious server activity
LexisNexis took three services offline last week after detecting "unusual activity" on servers hosted and managed by a third-party vendor, disconnecting from those systems to contain the issue and protect customer data. The disruption affects Nexis Diligence, a background and compliance-checking tool; Newsdesk, a news-monitoring service; and the Metabase API, which feeds near-real-time news and social content into customer applications, causing knock-on problems for businesses that rely on them.
Customers reported the outage began on Wednesday, and Diligence returned over the weekend, though its full content catalogue was still being restored; Newsdesk and Metabase API were expected to come back online progressively on Monday, pending testing. LexisNexis said it is working with a cybersecurity forensic firm and confirmed the incident is unrelated to a separate critical SQL injection flaw disclosed by Metabase on 6 August, which has already been linked to a breach at laptop maker Framework. One affected customer said they intended to seek compensation, warning the disruption could cost LexisNexis "millions." The company has faced prior security incidents, including a breach at its Legal & Professional division earlier this year and one at its Risk Solutions arm in 2025 affecting around 360,000 people.
In short
- LexisNexis took Diligence, Newsdesk and Metabase API offline after a security scare
- Outage began Wednesday; services restoring progressively, some still incomplete
- Unrelated to separate Metabase SQL injection flaw; a customer plans to seek compensation
Explained simply
LexisNexis is an information company that provides tools businesses use to check people and organisations, monitor news and bring news and social media content into their own applications. Nexis Diligence supports background and compliance checks, while Newsdesk and the Metabase API help customers track and use media coverage.
The affected systems were managed by an outside technology provider, whose servers showed activity LexisNexis considered unusual. The company disconnected from those systems while investigating with cybersecurity specialists; the incident is separate from a previously disclosed flaw in Metabase software.
Businesses rely on these services for day-to-day research and monitoring, so interruptions can affect their work and lead to financial losses. The incident also comes after other security breaches involving parts of LexisNexis, putting the company’s handling of customer data in focus.