2026 Lexitas (Deposition Solutions) — DepositionNet web-server misconfiguration exposed legal files since 2019
Data compromised
Mainly deposition transcripts, exhibits and other legal documents. Personal information is scattered through testimony, so identifying affected people took months of manual review.
Technical writeup
Company notification letters filed with the California Attorney General on Oct 22, 2026. The AG listing dates the breach to 09/01/2019. Lexitas says it is not aware of fraud or misuse linked to the information. The exposure window is the part to watch: a misconfiguration that lasted years before detection. recordsAffected 0 (count not listed).
Root cause
Web-server configuration error made certain files in the OnDemand (DepositionNet) application reachable over the internet without authentication. Lexitas says the error occurred around September 2019 and was not detected at the time; it learned of it from a customer on May 29, 2026.