Massive Conduent Data Breach Exfiltrates 8 TB Affects Over 25 Million Americans

Cybersecurity Update: Conduent Data Breach

A significant data breach at the business services company Conduent has resulted in the exposure of sensitive personal information belonging to over 25 million individuals in the United States. This incident ranks among the largest cybersecurity breaches in recent history.

The breach remained undetected for nearly three months, during which the SafePay ransomware group exfiltrated approximately 8 terabytes of data. While initial estimates suggested a smaller impact, recent reports indicate that 25.9 million individuals have been affected, predominantly recipients of government services in Texas and Oregon.

Unauthorized access to Conduent’s network was maintained from October 21, 2024, to January 13, 2025. During this period, the ransomware group systematically exfiltrated sensitive data, including names, Social Security numbers, dates of birth, medical records, and health insurance information.

After securing its systems in January, Conduent acknowledged the breach. However, the full scope of the incident was not immediately clear, resulting in a staggered notification process that has attracted regulatory attention.

Impact on State Agencies and Corporates

The breach has significantly affected state government agencies that depend on Conduent for processing Medicaid, SNAP, and child support services. Texas has been particularly impacted, with 15.4 million residents affected. Oregon officials have reported that 10.5 million records were compromised.

Additionally, corporate entities such as the Volvo Group have reported exposure of employee data. Affected individuals are being advised to place fraud alerts on their credit files due to the risk of identity theft posed by the stolen data.

Based on reporting by GBHackers.