> The threat actor had accessed the company’s GitHub account and accessed "some software artifacts as well as some personal information."

LexisNexis offers software to perform credit checks and sanctions screening so access to their source code is arguably more valuable than any personal data - it could be used to sidestep the regulatory steps in the financial system and facilitate fraud, money laundering etc.