Ransomware gang claims Conduent breach: what you should watch for next

A ransomware group, SafePay, reportedly claimed responsibility for the Conduent breach and listed the company on its leak site. Conduent says an unauthorized third party had access to its systems from 21 October 2024 until the intrusion was stopped on discovery, with the breach discovered on 13 January 2025. The Record notes that more than 400,000 people in Texas were impacted, with data including Social Security numbers, medical information and health insurance details.

Additional affected populations included 76,000 in Washington, 48,000 in South Carolina, 10,000 in New Hampshire and 378 in Maine, with breach notices filed in Oregon, Massachusetts, California and New Hampshire. SafePay reportedly claimed to have exfiltrated 8.5 terabytes of files from Conduent’s systems. The article also advises readers to remain alert to fraud and identity theft for potentially millions of people affected.