Millions Impacted by Conduent Data Breach

According to SecurityWeek, business services provider Conduent is notifying millions of people that personal information was stolen in a January 2025 data breach, with initial disclosure of system disruptions affecting government agencies in multiple US states in late January.

The hackers accessed Conduent’s network on 21 October 2024 and were evicted on 13 January 2025 after the attack was identified, during which files containing names, addresses, dates of birth, Social Security numbers, health and insurance information were exfiltrated. Based on breach notices to state authorities, at least 4.5 million individuals were impacted, with the largest number in Texas (4 million), though the company has not provided an exact total.

Conduent has not offered free identity theft protection to affected individuals, instead recommending free credit reports, fraud alerts, and security freezes on credit files. While the company has not publicly detailed the threat actor, the Safepay ransomware group claimed the incident in February.