LexisNexis disables three key services after detecting unusual third-party server activity

LexisNexis removed three of its services - Diligence, Newsdesk and the Metabase API - from operation after identifying unusual activity on third-party-hosted servers, according to internal communications from Todd Larsen, president of Nexis Solutions. Larsen explained that disconnecting from those systems was necessary to protect customers and preserve the integrity of the company’s environment while a leading cybersecurity forensic firm conducts a review.

Diligence was brought back online during the weekend, yet the full content catalog is still being restored, and the other two services are expected to resume incrementally pending successful testing. Customers reported the outage began on Wednesday and continues, with at least one client threatening legal action to recover losses amounting to millions. LexisNexis clarified that the incident is unrelated to a recent critical Metabase SQL injection flaw and that its Metabase API product has no connection to Metabase Cloud.