Deposition Solutions, LLC

A web server misconfiguration left files in Lexitas's OnDemand application, also called DepositionNet, reachable without authentication from around September 2019 until a customer flagged it on May 29, 2026. The files were mostly deposition transcripts and exhibits, with personal details buried in testimony for roughly 14,361 people, by the letter's count. The logs are too thin to say who looked. For nearly seven years, the only monitoring that worked was a customer noticing something fishy.