LexisNexis took three services offline last week after detecting "unusual activity" on servers hosted and managed by a third-party vendor, disconnecting from those systems to contain the issue and protect customer data. The disruption affects Nexis Diligence, a background and compliance-checking tool; Newsdesk, a news-monitoring service; and the Metabase API, which feeds near-real-time news and social content into customer applications, causing knock-on problems for businesses that rely on them.

Customers reported the outage began on Wednesday, and Diligence returned over the weekend, though its full content catalogue was still being restored; Newsdesk and Metabase API were expected to come back online progressively on Monday, pending testing. LexisNexis said it is working with a cybersecurity forensic firm and confirmed the incident is unrelated to a separate critical SQL injection flaw disclosed by Metabase on 6 August, which has already been linked to a breach at laptop maker Framework. One affected customer said they intended to seek compensation, warning the disruption could cost LexisNexis "millions." The company has faced prior security incidents, including a breach at its Legal & Professional division earlier this year and one at its Risk Solutions arm in 2025 affecting around 360,000 people.