THE Conduent breach has grown into one of the largest third‑party data incidents in US history, with state notifications pushing the affected total from roughly 10.5 million to more than 25 million people. Texas alone jumped from an early estimate of about 4 million to 15.4 million residents impacted, while Oregon remained around 10.5 million. Attackers reportedly spent about three months in Conduent’s environment and exfiltrated around 8 TB of data.
The cyberattack was later claimed by the SafePay ransomware gang, and the exposed data includes full names, postal addresses, dates of birth, Social Security numbers and other identifiers, along with medical information and health insurance details. Conduent’s role behind the scenes in US public services and corporate back‑office work helps explain the broad potential blast radius, even for people who have never heard of the company.
The article notes that the breach illustrates how third‑party compromises can be opaque and affect individuals whose direct relationship was with a state agency, insurer, or employer.