Lexitas Data Breach Investigation
Deposition Solutions, LLC, doing business as Lexitas, was identified in regulatory listing data concerning a reported data incident involving sensitive personal, financial, and health-related information. The available records do not specify the incident’s cause or discovery date, and the information involved may differ by person. Strauss Borrelli PLLC is investigating the incident and the rights of people who received notice. If you believe you were affected, fill out the secure contact form on this page to ask whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Deposition Solutions, LLC dba Lexitas (Legal Software)
- Incident Type: Reported data incident; method not specified
- Date of Incident: September 1, 2019
- Discovery Date: Not specified in the available incident-specific materials
- Official Notice Date: October 14, 2026
- Exposed Information: Social Security numbers, dates of birth, driver’s license numbers, financial account numbers, health records, and health insurance information
- Affected Population: 14,361 individuals, as reported in structured regulatory listing data
What Happened?
According to structured regulatory records, Deposition Solutions, LLC dba Lexitas reported an incident date of September 1, 2019. The same records identify October 14, 2026, as the official notice date, while the matter was publicly listed on a state attorney general portal on October 22, 2026. The available incident-specific material does not identify when the event was discovered, how access allegedly occurred, whether ransomware or a vendor was involved, or how long any information may have been accessible.
This distinction matters: a regulatory listing can report that personal information may have been involved without establishing every technical detail or proving misuse. Recipients should rely on the notice they received for information specific to them because data elements can differ among individuals. They should also keep the envelope, email, and all included pages. Those materials may help establish when notice was received, what protections were offered, and which categories of information were identified for that person.
What Information Was Exposed?
The regulatory listing data identifies the following categories as potentially involved:
- Social Security numbers
- Dates of birth
- Driver’s license numbers
- Financial account numbers
- Health records
- Health insurance information
The particular combination may vary by individual. Social Security numbers and birth dates can increase the risk of identity or credit fraud, while financial account information may be used in account-verification scams. Health and insurance data can create risks of fraudulent patient billing, medical identity theft, false insurance inquiries, and convincing phishing messages. Because Lexitas operates in the legal software sector, recipients should also be cautious about professional-looking messages involving documents, invoices, payments, or account verification.
What Should You Do Next?
- Review and retain your notice: Confirm which data categories were identified for you, save every page, and note any protection services or response deadlines described in the notice.
- Consider freezing your credit: A security freeze can make it harder for someone to open a new account in your name. Contact Equifax, Experian, and TransUnion separately, and consider placing a fraud alert if appropriate.
- Monitor financial and credit activity: Review bank and credit card statements, obtain your credit reports, and investigate unfamiliar accounts, withdrawals, address changes, or password-reset messages promptly.
- Watch for medical and professional scams: Examine insurance explanations of benefits and medical bills for unfamiliar services. Be skeptical of callers or emails requesting insurance details, document access, invoice payments, wire transfers, or login credentials.
- Document suspected misuse: Keep screenshots, emails, letters, reports, and records of time or money spent responding. Report identity theft through IdentityTheft.gov and contact relevant financial or insurance providers using verified contact information.
Your Legal Rights
People affected by a reported data incident may have rights under state privacy, consumer-protection, data-security, or breach-notification laws. The rights available depend on factors such as residency, the information involved, the circumstances of the incident, whether misuse occurred, and whether legally required notice was timely and adequate. In some cases, affected individuals may be able to seek compensation for documented losses or other legally recognized harm, subject to applicable requirements.
Preserve your notice and records of suspicious activity, credit-monitoring expenses, bank fees, lost time, and communications with financial or medical organizations. Speaking with a qualified data privacy attorney can help you understand potential options. General information on this page is not individualized legal advice and does not guarantee that a claim is available.
Why Hire Strauss Borrelli PLLC?
The firm investigates data privacy incidents and evaluates whether affected individuals may have claims arising from the handling or protection of their personal information. Its attorneys can review regulatory filings, notice materials, the types of information reportedly involved, and any documented harm. A confidential consultation can help recipients better understand the legal process and potential next steps, although no particular result or recovery can be promised.
If you received a breach notification letter from Deposition Solutions dba Lexitas:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
