LexisNexis Hack Exposes 3.9M Records Through Unpatched React Vulnerability

LexisNexis confirmed a breach after attackers exploited an unpatched React (React2Shell) vulnerability to access AWS containers and exfiltrate roughly 3.9 million records, 53 plaintext AWS Secrets, thousands of database tables, customer accounts, and VPC infrastructure maps; the actor FulcrumSec published over 2 GB of stolen files on dark web platforms. The company reports the impacted servers were limited and largely contained legacy data (pre-2020) and claims no exposure of SSNs, driver’s licenses, active passwords, or financial information; investigations and customer notifications are underway.