Summary
- Environment: OnDemand (DepositionNet) web server
- Operational impact: Public access restricted; no service outage established
- Financial impact: No incident cost established in the reviewed evidence
- Record status: Developing record. Reviewed October 23, 2026; updated as evidence emerges.
What happened
Impact
Exposed files primarily included deposition transcripts, exhibits and other legal documents. Potential personal data included names, Social Security and driver’s-license numbers, financial accounts, birth dates, medical details and insurance information. Limited logs prevented determining whether specific information was viewed, copied or downloaded. [1]
Timeline
Exposure discovered and restricted
Public access was restricted within hours of the customer report.
[1]Notice dated
The individual letter describes the exposure.
[1]Briefing updated
This briefing was last reviewed and updated on October 23, 2026.
Threat Group & Attack Vector
Lexitas attributed the exposure to server configuration, reporting no evidence of malware or continuing attacker presence. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Lexitas engaged forensic specialists, tested security enhancements and offered monitoring and fraud assistance. Manual review of testimony took months; it said law enforcement did not delay notification. No known misuse was reported. [1]