Conduent Business Services, a vendor supporting The Empire Plan for New York State Health Insurance Program (NYSHIP) members, experienced a data breach. The breach was discovered in January 2025, and investigations revealed unauthorized access to systems between October 21, 2024, and January 13, 2025. Conduent issued a statement confirming the breach, and notification letters were sent to affected individuals.
The confirmed data types exposed include names, addresses, Social Security numbers, medical records, birthdates, health insurance information, treatment data, and claims data. At least 62,224,658 individuals were affected, as reported to the U.S. Department of Health and Human Services Office for Civil Rights. The states affected include Oregon, Texas, New Hampshire, and Wisconsin. The exact number of individuals impacted in certain states, beyond the 62.2 million reported to OCR, remains unclear.
Details about data breaches can emerge over time, and notices to affected individuals may be delayed.