The 46-Page Report
In June 2022, Claudia Marchan received a document from LexisNexis.
Marchan is the director of a community advocacy organization in Chicago. She was aware that data brokers existed and that large companies aggregated personal information from public and commercial sources.
She was not prepared for the scope of what arrived.
The report was 46 pages long.
It listed every address she had lived at, phone numbers associated with her name, email addresses, family members, and professional contacts. It included her Social Security number in full. The report also mapped connections to people she knew.
"It was very precise, very complete, and very detailed," Marchan later said in interviews.
Since receiving the report, she described ongoing anxiety about how the information could be used, not only against her but against people connected to her through family, housing, and work relationships.
The document was not compiled for her benefit. It was generated through LexisNexis systems designed for institutional customers.
That same type of report can be accessed by government agencies, insurers, and other authorized customers within seconds.
All without a warrant.
All without notice to the individual.
All under existing law.
This is LexisNexis.
From Legal Research to Surveillance Infrastructure
LexisNexis is widely known as a legal research platform used by attorneys to search case law and statutes. Over time, it expanded into data aggregation, analytics, and identity resolution services.
The company is owned by RELX, a multinational information and analytics conglomerate headquartered in the UK and Netherlands.
Today, LexisNexis operates as one of the largest identity and risk intelligence providers in the United States.
According to company disclosures, public reporting, and court filings, LexisNexis maintains:
- 138 billion documents
- 276 million consumer profiles
- 10,000+ data sources
- Billions of records added daily
- 5 billion device records
- 2 billion linked digital identities
The system does not rely on a single category of data. Instead, it aggregates and cross-references information from public records, commercial sources, utilities, insurance systems, telecommunications records, and data brokers.
Public reporting has documented LexisNexis datasets that include:
- Current and historical addresses
- Phone numbers, including mobile and unlisted numbers
- Social Security numbers
- Employment history
- Property ownership and transactions
- Vehicle registrations
- Court and incarceration records
- Professional and occupational licenses
- Hunting and fishing licenses
- Concealed carry permit records in some jurisdictions
- Bankruptcy filings, liens, and judgments
- License plate reader data
- Vehicle collision records
- Aviation and maritime registrations
- Networks of relatives, neighbors, and associates
These profiles are continuously updated and linked through identity resolution tools.
Relationship Mapping and Network Exposure
One of LexisNexis’s most powerful capabilities is relational analysis.
Its Accurint platform, used by institutional and government customers, is designed to map relationships between individuals based on shared addresses, phone numbers, financial records, and other data points.
According to training materials and product documentation:
- A single search can surface relatives, neighbors, and associates
- Results can extend multiple degrees beyond the original subject
- Timeline tools show historical movement and address changes
- Link analysis charts visualize social and familial networks
This means searches do not stop at one person.
Searching for one individual can expose information about dozens of connected people, many of whom were never subjects of any investigation.
As investigative reporting has noted, the scale of exposure grows multiplicatively with each query.
Government Use as One Application
LexisNexis sells access to its systems to a wide range of customers, including financial institutions, insurers, corporations, and government agencies.
Public records and Freedom of Information Act disclosures show that federal, state, and local agencies use LexisNexis products for investigations, compliance checks, and identity verification.
One well-documented use case involves Immigration and Customs Enforcement (ICE), which has contracts allowing access to LexisNexis systems.
FOIA records obtained by advocacy organizations revealed that, over a seven-month period in 2021 and 2022, ICE conducted over 1 million searches using LexisNexis tools.
Those searches included:
- Advanced person searches
- Phone number ownership lookups
- Vehicle and registration searches
- Social media account identification
- Jail booking record queries
While immigration enforcement has received significant public attention, it is important to note that ICE is not unique in its access.
LexisNexis contracts exist across numerous federal agencies, including:
- Department of Homeland Security
- FBI
- DEA
- IRS
- Secret Service
- Department of Defense entities
- Department of Labor
- Food and Drug Administration
- Coast Guard
The common factor is not the mission of any single agency, but the availability of comprehensive personal data without judicial authorization.
Circumventing Judicial Oversight
Under the Fourth Amendment, government agencies generally must obtain a warrant to search or seize private information.
However, under existing legal doctrine, information held by third parties may not receive the same level of constitutional protection.
Data brokers occupy a unique position within this framework.
When the government purchases personal data from a private vendor instead of compelling disclosure directly, warrant requirements may not apply.
LexisNexis operates within this legal gap.
By maintaining vast, continuously updated identity profiles and selling access through contracts, the company provides an alternative pathway to information that would otherwise require court approval.
This dynamic has implications beyond any single enforcement context.
Vehicle and Behavioral Data Expansion
LexisNexis’s reach extends beyond traditional records.
In 2024, reporting revealed that major automakers had been sharing detailed vehicle telemetry data with LexisNexis, including driving behavior and location information.
According to investigations:
- Vehicles transmitted GPS coordinates
- Speeding events, braking patterns, and trip details were recorded
- Data was used to generate driver risk scores
- Insurers accessed these scores to adjust premiums
In several cases, drivers learned of this data collection only after insurance denials or premium increases.
Multiple class action lawsuits followed.
In 2025, the Federal Trade Commission settled with General Motors, imposing restrictions on future data collection. However, previously collected data remained in circulation.
Legal Challenges and Oversight
LexisNexis is currently the subject of ongoing litigation in Illinois and other jurisdictions.
Plaintiffs allege that the company collects and sells personal data without consent and facilitates surveillance without adequate safeguards.
The cases raise questions about:
- Consumer consent
- Data accuracy
- Secondary use
- Network exposure
- Constitutional protections
LexisNexis has stated that it complies with applicable laws and contractual requirements and that its products support fraud prevention and public safety objectives.
Courts have not yet issued final rulings resolving these issues.
A Structural Risk, Not a Single Actor
LexisNexis is not an anomaly within the data broker ecosystem.
It represents a mature version of a broader model:
- Collect large volumes of personal data
- Aggregate across sources
- Resolve identities
- Sell access at scale
- Operate within legal gray areas
- Lobby against restrictions
What distinguishes LexisNexis is scale, integration, and institutional adoption.
The result is a privatized surveillance infrastructure that the government, insurers, and corporations rely on rather than build themselves.
What Individuals Can Do
Under certain state laws, individuals can request copies of their LexisNexis consumer reports.
LexisNexis operates an Individual Access Program that allows people to request disclosure of some personal data held about them.
The process typically requires:
- Proof of identity
- Proof of address
- Submission by mail
- A waiting period of 30–60 days
Opt-out options exist for limited consumer-facing products, though they do not generally apply to government or law enforcement systems.
The Bigger Picture
The LexisNexis case illustrates a fundamental shift.
Surveillance is no longer primarily a government function. It is outsourced, commercialized, and normalized through private infrastructure.
Data is collected continuously. Relationships are mapped automatically. Access is sold contractually.
The central question is no longer whether surveillance exists, but who controls it, who can access it, and whether meaningful consent or oversight exists at all.
As one individual who requested her own report put it:
"We didn’t even know where to start."
Cat Karow is the CEO of ZoraSafe, an AI-powered cybersecurity platform protecting families and seniors from scams and digital threats. She has 20+ years in cybersecurity, including roles at Apple, the White House OCIO, and GuidePoint Security. Follow The Shield Blog for more investigations into the companies that profit from personal data.
Sources
- The Intercept, reporting on government use of LexisNexis systems
- Vice Motherboard, reporting on LexisNexis government contracts
- CBS News, coverage of LexisNexis litigation
- The Guardian, reporting on data broker use of jail records
- The Markup, analysis of data broker lobbying
- New York Times, reporting on vehicle data collection
- Ramirez v. LexisNexis Risk Solutions, federal court filings
- LexisNexis Accurint product documentation