Consumer complaint received 2025-07-27 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Problem with a company's investigation into an existing problem — Was not notified of investigation status or results
Company: LEXISNEXIS
State: NC

Complaint narrative:
Dear CFPB, I am writing to report a serious breach of my personal information due to a confirmed data breach by LexisNexis, a major consumer reporting agency. My sensitive data including Social Security number, identity profile, and financial activity may have been exposed. 

This breach affects my ability to trust the accuracy and security of any third-party data reporting and undermines my confidence in any credit reporting or scoring mechanisms based on compromised data. 

Requested Actions : Investigate LexisNexis for compliance with the Fair Credit Reporting Act ( FCRA ). 

Require all credit bureaus ( XXXXXXXX XXXX XXXX  ) to : Validate all disputed data with me directly Allow early deletion of accounts that are paid, closed, or potentially exposed Recommend LexisNexis offer free identity theft protection and credit monitoring. 

Request extended fraud alerts on my credit files across all bureaus. 

This situation has caused great distress, and I am invoking my rights under the FCRA ( 15 U.S.C. 1681 et seq. ) and related state consumer protection laws. 


Summary of the Breach In XX/XX/XXXX, LexisNexis Risk Solutions suffered a data breach that exposed names, Social Security numbers, drivers license numbers, and birthdates of over XXXX individuals, including myself. The breach was not publicly disclosed until XXXX XXXX. 

LexisNexis is a major data broker and trusted source for identifying individuals in credit reporting and underwriting. Their data feeds into risk assessments, background checks, and credit profiles. 
Consumer Financial Protection Bureau LexisNexis Risk Solutions Concerns & Legal Basis Accuracy of Reporting Under the Fair Credit Reporting Act ( FCRA ), entities providing data for credit and other assessments must ensure accuracy and integrity of information. 

Data Broker Liability Under FCRA The CFPB previously proposed treating data brokers as consumer reporting agencies under FCRA, which would require compliance with privacy, accuracy, and dispute resolution ruleseven though the proposal was withdrawn in XXXX. 

Information Security Violations The CFPBs own enforcement guidance states that companies must protect from unfair practices, including publishing or reporting junk data due to breaches, which can mislead credit systems. 


Requested Actions I request that the CFPB : Investigate the LexisNexis breach, especially given its downstream effects on consumer credit and identity system data. 

Evaluate whether LexisNexis should be regulated under FCRA rules, including requiring transaction records for accuracy and take-down procedures. 

Ensure that no inaccurate or stale personal data from the breach continues to circulate to credit bureaus, lenders, or background verifiers. 

Provide guidance to consumers on managing credit/data impacts from such breaches, including fraud alerts or freezes. 

Supporting Context LexisNexis provides data critical to credit and risk systems, yet a breach like this poses enormous threat to data integrity. 

Earlier CFPB plans indicated data brokers would fall under FCRA oversight, though those rules were rescinded. 

CFPB has published multiple advisories explaining that reporting inaccurate or stale data is unlawful, and enforcement actions including suing credit bureaus for poor data quality have occurred. 
XXXX Thank you for reviewing my complaint. I ask for prompt clarity, consumer protections, and consideration of stronger oversight of data brokers like LexisNexis. 

Sincerely, XXXX XXXX XXXX

Company response to consumer: Closed with explanation