Business Context and Reporting Period
This Form 6-K filing by Reed Elsevier PLC and Reed Elsevier NV (now RELX PLC) was furnished on April 12, 2005. The report primarily addresses a security incident involving the LexisNexis division, specifically its Seisint unit, regarding unauthorized access to US risk management databases.
Key Financial Metrics
The filing does not provide specific revenue, profit, cash flow, margin, debt, or liquidity figures for the reporting period. It focuses exclusively on the operational and reputational impact of the data security incident.
Material Changes and Incident Details
- Incident Scope: A comprehensive review of data search activity over the last two years identified 59 incidents of unauthorized access.
- Impact: Approximately 310,000 US individuals may have had personal identifying information (names, addresses, Social Security numbers, driver's license numbers) accessed.
- Method: The access was predominantly achieved through the misappropriation of IDs and passwords from legitimate Seisint customers, not through a breach of technology infrastructure by hackers.
- Data Limitations: The databases do not hold personal credit histories, medical records, or financial records.
- Customer Response: Of the 30,000 individuals notified in March, approximately 2% contacted the company to accept free credit monitoring services; none reported identity theft to date.
Guidance, Outlook, and Management Commentary
- Financial Impact: Management states the financial implications of the unauthorized access are expected to be manageable within the context of LexisNexis's overall growth.
- Remediation: The company is notifying affected individuals and offering free support services, including credit bureau reports, one year of credit monitoring, fraud insurance, and fraud counseling.
- Security Improvements: Significant improvements to customer password and ID administration security processes are being implemented.
- Reaffirmed Targets: Reed Elsevier reaffirmed its 2005 and longer-term financial targets of at least 5% organic revenue growth and double-digit adjusted earnings per share growth at constant exchange rates.
Investor Verification Checklist
- Verify the total cost of the remediation program (credit monitoring, insurance, legal fees) against the "manageable" financial impact claim.
- Monitor for any future regulatory fines or class-action litigation arising from the 310,000 affected individuals.
- Confirm the implementation timeline and effectiveness of the new password and ID administration security processes.
- Track the actual organic revenue growth and EPS performance in subsequent quarterly reports to ensure the reaffirmed targets remain achievable.