Now, Americans’ personal data is distributed on more digital platforms than ever before. From online shopping habits to fitness tracking logs, personal information ends up with hundreds of company databases. While most people are concerned about social media leaks or email hackers, the visible threat comes from data brokers.

I still find it hard to believe that such a company can operate with very little legal review. These companies conduct transactions with personal information without our knowledge or consent. What makes me even more confused is that one thing they are not serious about protecting their business models: data.

Just last year, we saw news of a large-scale data breach from a data broker called "National Public Data". 2.7 billion records exposed. Now, another data broker, Lexisnexis, the industry's main name, reported a major violation that exposed sensitive information from more than 364,000 people.

Join the free "Cyberguy Report": Get my expert technical tips, critical security alerts and exclusive deals, and instant access to my Free "Ultimate Scam Survival Guide" When you register!

A few months after the holiday hack lost, lexisnexis vulnerability has not been discovered

Lexisnexis submitted Notify Maine Attorney General Revealed that hackers have access to consumer data through third-party software development platforms. The violation occurred on December 25, 2024, but the company only discovered it a few months later. Lexisnexis was reminded on April 1, 2025 by an unnamed person who claimed to have found sensitive documents. It is not clear whether the person is responsible for the violation or only encountering exposed data.

184 million passwords and logins are disclosed in large-scale data breach

A Lexisnexis spokesman confirmed that hackers can access the company's GitHub account. This is a platform commonly used by developers to store and collaborate on code. Security Guides repeatedly warn against storing sensitive information in such repositories; however, errors such as naked access tokens and personal data files continue to occur.

The stolen data varies from person to person, but includes full name, date of birth, phone number, mailing and email address, social security number and driver's license number. Lexisnexis has not confirmed whether it has received any ransom demand or has further contact with the attacker.

Delete custom data: Why is online personal information important

Why Lexisnexis Hack is a bigger threat than you realize

LexisNexis is not a household name for most people, but it plays a major role in how to harvest and use personal data behind the scenes. The company obtains information from a wide range of sources and compiles detailed information to help other businesses assess risks and detect fraud. Its clients include banks, insurance companies and government agencies.

In 2023, the New York Times reported that several automakers shared driving data with LexisNexis without notifying owners. This information is then sold to an insurer, which uses it to adjust premiums based on personal driving behavior. This story clearly shows one thing. Lexisnexis has access to a lot of personal details, even from people who have never wanted to interact with the company.

Law enforcement also uses Lexisnexis tools to dig up information about suspects. These systems have access to phone records, home addresses and other historical data. While such tools may aid in the investigation, they also highlight a serious problem. When this sensitive information is concentrated in one place, it becomes a single point of failure. As recent violations suggest, failure is no longer a hypothesis.

184 million passwords and logins are disclosed in large-scale data breach

7 expert tips for protecting your personal data after data brokerage violations

Keeping your personal data safe can feel overwhelmed, but some practical steps can have a big impact in protecting your privacy and reducing your digital footprint. Here are 7 effective ways to control your information and get it out of errors:

1. Delete your data from the Internet: The most effective way to control data and avoid data brokers selling data is to choose to delete data. While there is no service that promises to remove all data from the Internet, it is great to have a deletion service if you want to keep monitoring and automatically delete information from hundreds of sites. View my preferred data deletion service here.

Get one Free scan Find out if your personal information is already on the Internet.

2. Review privacy settings: Take a few minutes to explore Privacy and security settings On the services you use. For example, limit who can see your social media posts, disable unnecessary location sharing on your phone, and consider turning off ad personalization on accounts like Google and Facebook. Most browsers can block third-party cookies or clear tracking data. The FTC recommends comparing privacy notifications for different sites and applications and selecting privacy notifications that allow you to opt out if possible.

3. Use privacy-friendly tools: Install Browser extensions Or plugins that block ads and trackers (such as Ublock Origin or privacy badge). You may switch to a more private search engine (such as DuckDuckgo or Brave) that does not record queries. When you don't want to save history and clear cookies and caches regularly, consider using your browser's "invisible" or private mode. Even a little habit, not logging in to an account without using or using a password manager, also makes your tracking less likely.

Click here to visit Fox Business

4. Beware of phishing links and use powerful antivirus software: Scammers may try to use phishing links to access your financial details and other important data. The best way to protect yourself from malicious links is to install antivirus software on all devices. This protection can also remind you about phishing email and ransomware scams, ensuring your personal information and digital assets are secure. The choice of the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.

5. Be cautious about personal data: Think twice before sharing the extra details. Do not fill out an online survey or quiz that requires personal or financial information unless you trust the source. Create a separate email address to register (so marketing emails won't go to your main inbox). Download the app from the official store only and check the app permissions.

6. Opt out of the data broker list: Many data brokers offer ways to opt out or delete information, although this can be a tedious process. For example, a website like popular brokers and their exit programs is listed, such as the Privacy Clearing Room or WhitePages Opt-out page. FTC's Consumer Guide, "Your guide to protecting privacy online" Includes tips about selecting target ads and deleting yourself from the People-Search database. Remember, you may have to repeat it every few months.

7. Beware of email communication: Bad actors may also try to trick you through snail mail. Data leaks allow them to access your address. They may mimic someone or brand you know and use topics that require urgent attention, such as missed delivery, account pauses and security alerts.

HR firm confirms 4 million records exposed in major hackers

Kurt's key points

For many, Lexisnexis violations may be the first time they realize their data flow. Unlike social media platforms or banks, there is no clear client relationship with data brokers, which makes it even more difficult to ask for transparency. This event should prompt a serious discussion on what kind of oversight must be conducted in the industry operating in the shadows. A smarter public and stronger regulations may be the only thing standing between personal data and permanent contact.

Click here to get the Fox News app

Should companies be allowed to sell your personal information without your consent? Let's write to us cyberguy.com/contact.

For more technical tips and security alerts for me, please subscribe to my free online coverage newsletter cyberguy.com/newsletter.

Ask Kurt a question, or let us know what stories you want us to cover.

Follow Kurt on his social channels:

Answers to the most popular web guess questions:

New things from Kurt:

Copyright 2025 Cyber​​Guy.com. all rights reserved.