LexisNexis Takes Diligence, Newsdesk, and Metabase API Offline After Vendor Server Activity

LexisNexis shut down Nexis Diligence, Nexis Metabase API, and Nexis Newsdesk after detecting suspicious activity on servers hosted and managed by an unnamed third-party vendor. The company said it disconnected from the affected vendor systems to contain the incident and protect customers, and has brought in a cybersecurity forensic firm to investigate while rebuilding impacted systems in a new environment before restoring service.

LexisNexis said the Nexis Metabase API is not connected to Metabase Cloud and is unrelated to the recently disclosed Metabase SQL injection zero-day. The outage follows earlier LexisNexis security incidents reported in 2025, including a breach affecting more than 364,000 individuals tied to exposed private GitHub repositories and a separate compromise of AWS-hosted infrastructure in which stolen files were later leaked.