Sedgwick discloses data breach after TridentLocker ransomware attack

Sedgwick confirmed a cybersecurity incident at its federal contractor subsidiary, Sedgwick Government Solutions, after the TridentLocker ransomware group claimed to have stolen 3.4GB of data on New Year’s Eve. Sedgwick employs roughly 33,000 people worldwide across more than 80 countries, with estimated annual revenue in the multi‑billion range, around $4–$5 billion per year.

TridentLocker is described as a ransomware‑as‑a‑service operation that uses double‑extortion, encrypting systems and threatening to release exfiltrated data, with North America and Europe as primary targets, and the UK among the focus areas; the Tor leak site lists 12 confirmed victims since its operation began on 11 November 2025.

Sedgwick said it activated its incident response protocols with external cybersecurity experts and segmented Sedgwick Government Solutions from the rest of its business, emphasising that no wider systems or data were affected. The company has notified law enforcement and impacted customers, and says there is no evidence of access to claims management servers or any impact on the subsidiary’s ability to continue serving clients, according to The Record Media.