LexisNexis breach (FulcrumSec claims React2Shell path)
› LexisNexis Legal & Professional (legacy systems / React frontend claim)
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Feb 24, 2026
- closed
- Mar 31, 2026
- CVEs
- 1
- sources
- 2
## summary
In March 2026 LexisNexis confirmed a breach of legacy servers exposing customer business contact and related data. Threat actor FulcrumSec claimed access via an unpatched React frontend “React2Shell” (CVE-2025-55182) into AWS infrastructure. LexisNexis said the matter was contained and mostly deprecated pre-2020 data.
severity: Data breach
## cve ids[1]
## affected
- n/a (customer breach); alleged unpatched React Server Components / Next.js stack
## fixed in
no fixed release yet
## news & write-ups[2]
## notes & caveats
React2Shell exploitation path is attributed to the threat actor claim / secondary reporting; LexisNexis public statements emphasize contained legacy-server exposure. CVE-2025-55182 is a 2025 React RSC RCE still relevant in 2026 exploitation narratives.
