We want to make you aware of a recent cybersecurity incident involving Lexipol’s policy management platform. As a valued member of RMSA, we understand the importance of ensuring transparency and security in your agency’s operations.
What happened
On February 11, Lexipol identified unauthorized access to certain policy-related information on its platform. Upon discovery, Lexipol took immediate action to secure its systems, launched an internal investigation, and engaged authorities to assess the scope of the incident. Lexipol subsequently contacted us, and we are working with them to manage this incident.
What information was affected
The incident involved access to agency policy manuals and certain customer records, such as agency names, personnel names, and work email addresses. However, it is important to note:
- Most of the accessed information, such as policy manuals, is already publicly available through transparency initiatives or public records laws.
- No sensitive personal data, such as personnel home addresses, Social Security numbers, personal emails, or mobile phone numbers, were involved in this breach.
Lexipol’s response
Lexipol has taken swift action by:
- Securing its systems and implementing additional security measures.
- Enhancing monitoring to detect and prevent future incidents.
- Working closely with law enforcement and cybersecurity experts to address any potential risks.
- Communicating directly with affected customers.
What you can do
No immediate action is required from agencies. However, we encourage you to remain vigilant against phishing attempts and other cybersecurity threats. It’s always a good practice to:
- Educate staff on recognizing suspicious emails or requests for sensitive information.
- Use strong passwords and multi-factor authentication where possible.
- Report any unusual activity to your IT support team.
For more details, Lexipol has published an FAQ page. This page also provides a way for agencies to submit a request for personalized follow-up from the Lexipol team.
We understand that cybersecurity is a top concern, and we are here to support you. If you have any questions or would like to discuss this further, please reach out to RMSA staff.