Quick Read
- A massive data breach at Conduent Business Services was identified on January 13, 2025, after hackers accessed systems for nearly three months.
- The incident, a ransomware attack by the Safeway gang, has compromised data for tens of millions across multiple U.S. states, including Texas and Oregon.
- Sensitive information like Social Security numbers, medical data, and health insurance details were exposed.
- Conduent is offering one year of free credit monitoring and expects to complete all consumer notifications by April 15, 2026.
- Cybersecurity experts advise affected individuals to freeze credit, monitor reports, and enhance online security measures.
WASHINGTON (Azat TV) – A massive data breach at Conduent Business Services, a prominent American provider of business process services, has compromised the personal and health information of tens of millions of individuals across multiple U.S. states. Identified in January 2025, the incident has brought Conduent’s data security practices under intense scrutiny, raising significant concerns about the protection of sensitive client and individual data.
The breach, which the Texas Attorney General reportedly labeled the largest data breach in U.S. history, involved a ransomware attack claimed by the Safeway ransomware gang. Hackers gained access to Conduent’s systems from October 21, 2024, until the discovery of the incident on January 13, 2025, compromising data for nearly three months, according to reports from SSBCrack and Fox News.
Extent of the Conduent Data Breach
The scale of the Conduent data breach is immense and continues to unfold. Initially, the Oregon Department of Justice reported that over 10 million individuals were affected. However, updated figures from Fox News indicate that at least 15.4 million Texas residents and 10.5 million Oregon residents may have had their data exposed. Notifications have also been issued to hundreds of thousands of people in states including Delaware, Massachusetts, New Hampshire, Georgia, South Carolina, New Jersey, Maine, and New Mexico, pushing the total number of impacted individuals into the dozens of millions.
Conduent, which provides services for large corporations, state agencies, and government healthcare programs, supports more than 100 million people nationwide. The compromised data includes highly sensitive information such as names, home addresses, Social Security numbers, medical information, and health insurance details. This combination of data is particularly dangerous, making affected individuals vulnerable to identity theft, medical fraud, and highly targeted scams.
Conduent’s Response and Ongoing Notifications
In response to the incident, Conduent publicly disclosed the breach in an April 2025 filing with the SEC. The company stated that it has been working diligently with internal and external experts to analyze the affected files and identify the personal information contained within them, a process described as time-intensive. Conduent expects to complete all consumer notifications by April 15, 2026, and has set up a dedicated call center (877-332-1658) to address inquiries from affected individuals.
Conduent is offering one year of free credit monitoring to those impacted, with a registration deadline of April 30, 2026. Despite the extensive compromise, a company spokesperson informed Fox News that Conduent has no evidence of any attempted or actual misuse of the potentially affected information, nor has it found evidence of data being released on the dark web, based on regular monitoring by its experts.
Protecting Personal Information After the Breach
Authorities and cybersecurity experts are urging recipients of notification letters to take immediate protective measures. Recommendations include placing a credit freeze with all three major credit bureaus (Equifax, Experian, and TransUnion) to prevent new accounts from being opened fraudulently. Regular monitoring of credit reports, bank, and credit card statements for unusual activity is also essential.
Additionally, individuals should remain vigilant against phishing attempts, strengthen email account security with strong, unique passwords and two-factor authentication (2FA), and consider installing robust antivirus software. For enhanced protection, identity theft protection services can monitor sensitive identifiers like Social Security numbers, and data removal services can help reduce an individual’s digital footprint by removing personal information from data broker sites, as advised by cybersecurity experts cited by Fox News.
The Conduent data breach serves as a stark reminder of the escalating risks associated with digital service providers handling vast amounts of sensitive personal information. The incident underscores the critical need for robust cybersecurity measures, continuous vigilance, and clear communication from companies to affected individuals, especially as the interconnectedness of government services and private entities continues to expand.