Credit Bureaus & Data Brokers · Specialty consumer reporting agency / data broker (insurance, identity, driving data) · Private litigation + Data breach
LexisNexis Risk Solutions (RELX)
Headline
LexisNexis Risk Solutions was one of two data companies that bought driving-behavior data from General Motors' OnStar Smart Driver program, along with Verisk.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
LexisNexis Risk Solutions was one of two data companies that bought driving-behavior data from General Motors' OnStar Smart Driver program, along with Verisk. That data could then reach auto insurers. In April 2026 the federal judge overseeing the consolidated driving-data litigation (In re Consumer Vehicle Driving Data Tracking Litig., MDL No. 1:24-md-03115, N.D. Ga.) let FCRA claims against LexisNexis proceed. Separately, the company lost personal data, including SSNs and driver's license numbers, of 364,333 people in a December 2024 theft from its account on a third-party software-development platform (GitHub). It did not discover the theft until April 2025.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-16
Case status. Private litigation; the legal tier of its sources has not been assigned yet.
Primary source. dicellolevitt.com/court-allows-gm-onstar-vehicle-data-privacy-lawsuit-to-move-forward/ — Unverified - heuristic first draft.
Terms
Arbitration
Not verified this pass. Consumers generally have no contract with LNRS; their data arrives through third parties, so a consumer arbitration clause would rarely apply.
Data sharing
DRIVING DATA PIPELINE: per the MDL complaint and press coverage, GM and OnStar collected trip-level driving behavior and shared it with LexisNexis Risk Solutions and Verisk. Plaintiffs allege it was then used in insurance underwriting; that remains an allegation. BREACH: unauthorized acquisition on Dec. 25, 2024 via a hacked corporate login on GitHub; discovered Apr. 1, 2025; 364,333 people notified (Maine AG); names, contact info, SSNs, and driver's license numbers or DOBs. LNRS says its own systems were not compromised. The global privacy policy (last updated Sept. 1, 2026) does not use the word 'sell' but discloses sharing with 'sponsors, joint venture partners and other third parties'. U.S. state-law rights go through consumer.risk.lexisnexis.com.
Fees and billing
No consumer fee findings this pass. The consumer disclosure report is available through the consumer portal; fees were not verified this pass.
Contacts
Privacy contact. Data Protection Officer, LexisNexis Risk Solutions, Global Reach, Dunleavy Drive, Cardiff CF11 0SN, UK; U.S. requests at https://consumer.risk.lexisnexis.com/request; LexisNexis Consumer Center 1-800-456-6004 (for adverse action letter information)
Legal notice. Not verified this pass. The parent, RELX PLC, is at 1-3 Strand, London WC2N 5JR, UK (SEC EDGAR). Use the state registered-agent search for LexisNexis Risk Solutions Inc.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| Plaintiffs' firm press release · 2026-04-27 dicellolevitt.com/court-allows-gm-onstar-vehicle-data-privacy-lawsuit-to-move-forward/ | whole row | Unassigned | confirmed | “largely denied defendants' efforts to dismiss federal wiretap and privacy claims” Quote basis: not recorded. |
| News · 2026-04-23 news.bloomberglaw.com/litigation/gm-analytics-firms-fail-to-shake-lawsuit-over-drivers-data | whole row | Unassigned | confirmed | “adequately pleaded claims against LexisNexis Risk Solutions Inc. and Verisk Analytics Inc.” Quote basis: not recorded. |
| News · 2024-06-11 therecord.media/data-broker-shuts-product-driver-patterns | whole row | Unassigned | confirmed | “terminated partnerships with LexisNexis and Verisk in March” Quote basis: not recorded. |
| News (citing Maine AG filing) · 2025-05 www.bleepingcomputer.com/news/security/data-broker-lexisnexis-discloses-data-breach-affecting-364-000-people/ | whole row | Unassigned | confirmed | “There was no compromise of our own systems, infrastructure, or products.” Quote basis: not recorded. |
| Company privacy policy · 2026-09-01 risk.lexisnexis.com/privacy-policy | whole row | Unassigned | confirmed | “We share your personal information with our affiliates and with sponsors, joint venture partners and other third parties” Quote basis: not recorded. |
| Company consumer page · 2026-10-16 consumer.risk.lexisnexis.com/ | whole row | Unassigned | confirmed | No quote recorded. Quote basis: not recorded. |
| Wikipedia (lead only) · 2026-10-16 en.wikipedia.org/wiki/LexisNexis_Risk_Solutions | whole row | Unassigned | confirmed | “A subsidiary of RELX” Quote basis: not recorded. |
| SEC EDGAR · 2026-10-16 data.sec.gov/submissions/CIK0000929869.json | whole row | Unassigned | confirmed | No quote recorded. Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://risk.lexisnexis.com/privacy-policy | Not fetched yet | NOT CONFIRMED |
| Terms of service Not verified this pass | Not fetched yet | NOT CONFIRMED |
| Website https://risk.lexisnexis.com | Not fetched yet | — |
| Primary source https://dicellolevitt.com/court-allows-gm-onstar-vehicle-data-privacy-lawsuit-to-move-forward/ Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No comprehensive state privacy statute on file for GA