ACCORDING to Texas Attorney General Ken Paxton, Civil Investigative Demands were issued to Blue Cross Blue Shield of Texas and Conduent Business Services LLC, demanding documents and information pertinent to the investigation of the Conduent data breach.
The Office of the Attorney General is examining the breach of Conduent’s system security that occurred between 21 October 2024 and 13 January 2025, during which an unauthorised third party accessed the protected health information of Texas residents, including Medicaid recipients. The Conduent breach was described in Paxton’s press release as likely the largest breach in U.S. history, with the AG signalling a focus on whether entities cut corners or failed to protect data.
BCBS is noted as one of the multiple entities affected by the Conduent breach, and the investigation seeks evidence of BCBS’s compliance with state law and protection of confidential information. Conduent’s security measures, communications, and compliance with Texas law are also under review. The author emphasises the AG’s commitment to uncovering what went wrong and ensuring action for Texans’ privacy.