Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach

According to WVNews, protected health information for 462,000 Montanans who are customers of Blue Cross Blue Shield of Montana was involved in a Conduent data breach, which ran from October 2024 to January 2025 and was first disclosed in April 2025. The breach exposed personal data such as Social Security numbers, birth dates and medical service details, including treatment and diagnosis codes, provider names and claim amounts for current and former BCBSM customers.

The Conduent incident began on 21 October 2024 and was discovered on 13 January 2025, with the Company stating that a threat actor gained unauthorized access to a limited portion of its environment and that the data exfiltrated affected a limited number of clients. Conduent notified the Securities and Exchange Commission on 9 April 2025, and the company says the exfiltrated data has not been released on the dark web or publicly.

BCBSM’s website currently shows no breach notification, and the Montana Insurance and Securities Commission has questioned why notification to the state occurred later than expected.