Conduent Breach Exposes Data of 25 Million Americans

A massive data breach at Conduent, a major business technology firm, has exposed the personal information of at least 25 million Americans, according to updated notifications from state authorities and the company. The intrusion, which began in October 2024 and was detected on January 13, 2025, affected residents across multiple states, including an estimated 15.4 million people in Texas and 10.5 million in Oregon.

The cyberattack involved hackers accessing Conduent's network for nearly three months, from October 21, 2024, to January 13, 2025. During that period, attackers stole sensitive data including names, addresses, dates of birth, Social Security numbers, and health and insurance information. The breach, claimed by the SafePay ransomware group, also led to several days of operational disruptions for state agencies reliant on Conduent's services, such as payments and customer support in Wisconsin and Oklahoma.

Conduent, based in New Jersey, provides backend support for government programs nationwide, handling tasks like Medicaid claims processing, child support payments, food assistance, and unemployment insurance. The company serves agencies in 46 states and supports...