Data breach at Conduent revealed information of 25 million Americans

Conduent Data Breach Affects Millions

In a significant data breach, sensitive information of at least 25 million Americans has been compromised, including Social Security numbers and health insurance data. This incident involves Conduent, a tech firm based in New Jersey that serves various government and business clients.

The breach was reportedly initiated by hackers in October 2024, but it wasn’t discovered until January 13 of the following year, lingering undetected for almost three months. States are now revealing the extent of the impact.

In Texas, the number of potentially affected individuals was updated dramatically from 4 million to 15.4 million—a surge of 285%. Meanwhile, around 10.5 million people in Oregon have also been identified as possibly having their sensitive data exposed.

Numerous other individuals across states like Delaware, Massachusetts, and New Hampshire are believed to be victims as well. This incident has triggered a slew of legal actions, with several class-action lawsuits forming in federal court in New Jersey. These lawsuits accuse Conduent of inadequately safeguarding personal and health information and of delaying victim notifications after the breach was detected.

A steering committee for plaintiffs was established in December to oversee the case, which may result in substantial damages for Conduent, alongside regulatory consequences and friction with state clients.

Conduent manages essential backend systems for state governments, handling various tasks from Medicaid billing to child support payments, food aid, and unemployment benefits.

The attack was executed by the SafePay ransomware group, responsible for numerous cyberattacks. They claimed to have extracted around 8.5 terabytes of data from Conduent over an extended period. In February 2025, they listed Conduent on their Dark Web breach site, threatening to leak data unless a ransom was paid; however, it remains unclear if Conduent engaged with the hackers.

Currently, neither Conduent nor SafePay has confirmed the ransom amount demanded, and the company hasn’t disclosed if any payment was made. Conduent, which is publicly traded on Nasdaq, has seen its stock price plummet from over $23 per share in 2018 to about $1.50 as of this past Monday.