--- title: LexisNexis shuts down services after suspicious activity... description: LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline after detecting suspicious activity on servers managed by an unnamed... canonical: https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: LexisNexis shuts down services after suspicious activity on servers | daily.dev og:description: LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline after detecting suspicious activity on servers managed by an unnamed... og:url: https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu og:image: https://api.daily.dev/og/posts/Z2JrCDgBU.png og:image:alt: LexisNexis shuts down services after suspicious activity on servers og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # LexisNexis shuts down services after suspicious activity on servers **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline after detecting suspicious activity on servers managed by an unnamed third-party vendor. The company is working with a cybersecurity forensic firm to investigate and is rebuilding affected systems in a new environment. Todd Larsen, president of Nexis Solutions, confirmed the shutdown and clarified that the incident is unrelated to the recently disclosed Metabase Cloud zero-day SQL injection vulnerability. This follows a pattern of recent security incidents at LexisNexis, including a May 2025 breach affecting 364,000 individuals via compromised GitHub repositories, and a March breach by threat actor 'FulcrumSec' exploiting an AWS infrastructure flaw. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What LexisNexis services were taken offline due to the security incident? LexisNexis took three services offline: Nexis Diligence (a due diligence and risk research platform for compliance professionals), Nexis Metabase API (a news and media data feed for enterprise integration), and Nexis Newsdesk (a media monitoring and analytics service used by PR and marketing teams). The shutdown followed detection of unusual activity on servers hosted and managed by an unnamed third-party vendor. _Teams managing third-party vendor risk track incidents like this on daily.dev as they unfold._ ### Is the LexisNexis Nexis Metabase API outage related to the Metabase Cloud zero-day SQL injection vulnerability? No, the two are unrelated. Nexis Solutions is not a Metabase Cloud customer, and the Nexis Metabase API product has no connection to Metabase Cloud or the reported zero-day SQL injection vulnerability. The LexisNexis outage stems from suspicious activity on a separate third-party vendor's servers, not from the Metabase Cloud data-theft attacks. _Security teams distinguishing vendor incidents from shared-name products find clarity faster on daily.dev._ ## Similar posts on daily.dev - [LexisNexis Legal & Professional confirms data breach](https://daily.dev/posts/lexisnexis-legal-professional-confirms-data-breach-zcir7glbd) · The Register · 0 upvotes · 0 comments - [How a Single Overprivileged Service Turned the LexisNexis Breach Into a Keys-to-the-Kingdom Moment](https://daily.dev/posts/how-a-single-overprivileged-service-turned-the-lexisnexis-breach-into-a-keys-to-the-kingdom-moment-lazovvtmj) · Security Boulevard · 0 upvotes · 0 comments - [A breach at Thomson Reuters reached appellate courts in twelve US jurisdictions](https://daily.dev/posts/a-breach-at-thomson-reuters-reached-appellate-courts-in-twelve-us-jurisdictions-75pgbc8zv) · The Next Web · 0 upvotes · 0 comments - [Academic publisher Elsevier hit by LAPSUS$ redirect attack](https://daily.dev/posts/academic-publisher-elsevier-hit-by-lapsus-redirect-attack-y937giz46) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"LexisNexis shuts down services after suspicious activity on servers","url":"https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu"},"datePublished":"2026-08-10T12:12:43.972Z","dateModified":"2026-08-24T06:52:55.872Z","description":"LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline after detecting suspicious activity on servers managed by an unnamed...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/980bdca28466f8147b17ba787bb5ff79?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/980bdca28466f8147b17ba787bb5ff79?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"LexisNexis shuts down services after suspicious activity on servers"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/lexisnexis-shuts-down-services-after-suspicious-activity-on-servers-z2jrcdgbu#faq","mainEntity":[{"@type":"Question","name":"What LexisNexis services were taken offline due to the security incident?","acceptedAnswer":{"@type":"Answer","text":"LexisNexis took three services offline: Nexis Diligence (a due diligence and risk research platform for compliance professionals), Nexis Metabase API (a news and media data feed for enterprise integration), and Nexis Newsdesk (a media monitoring and analytics service used by PR and marketing teams). The shutdown followed detection of unusual activity on servers hosted and managed by an unnamed third-party vendor. Teams managing third-party vendor risk track incidents like this on daily.dev as they unfold."}},{"@type":"Question","name":"Is the LexisNexis Nexis Metabase API outage related to the Metabase Cloud zero-day SQL injection vulnerability?","acceptedAnswer":{"@type":"Answer","text":"No, the two are unrelated. Nexis Solutions is not a Metabase Cloud customer, and the Nexis Metabase API product has no connection to Metabase Cloud or the reported zero-day SQL injection vulnerability. The LexisNexis outage stems from suspicious activity on a separate third-party vendor's servers, not from the Metabase Cloud data-theft attacks. Security teams distinguishing vendor incidents from shared-name products find clarity faster on daily.dev."}}]} ```