Conduent Business Services, LLC experienced a data breach impacting over 62 million individuals. The breach, which occurred between October 21, 2024, and January 13, 2025, involved unauthorized access to Conduent's network. The company detected the breach in January 2025 and disclosed it in April 2025, with the final affected count confirmed in mid-2026 by the HHS Office for Civil Rights.
The compromised data types include names, Social Security numbers, dates of birth, addresses, medical records, health insurance policy numbers, treatment information, and claims data. The breach affected residents nationwide, with confirmed filings in Oregon (10.5 million affected), Texas (15.5 million affected), New Jersey, and Missouri. This incident is considered the third-largest healthcare data breach ever recorded in the U.S. Individual notifications are being mailed, offering 12 months of complimentary credit monitoring.
While details can emerge later and notices may be delayed, the scope of this breach is significant.