Conduent January 2025 breach impacts 10M+ people

Conduent disclosed that a January 2025 cyberattack exposed personal data for more than 10 million people, with a government filing later confirming 10,515,849 affected individuals according to the Oregon Department of Justice. The breach involved stolen files containing names, addresses, dates of birth, Social Security numbers and health and insurance information, and attackers accessed the network from October 21, 2024, to January 13, 2025.

Conduent said it restored operations quickly after discovery and noted one-time costs for notifications, while stating it holds cyber insurance and has informed federal authorities. The company warned affected individuals to monitor credit, and consider placing fraud alerts or security freezes.

In April 2025, Conduent revealed that personal information was stolen in the January cyberattack and that incidents caused outages for agencies in multiple US states, though the firm reported no major operational impact beyond these one-off costs.