Conduent Data Breach Becomes Largest in U.S. History After Ransomware Group Steals 8 TB - cyberpress.org

Conduent Data Breach Becomes Largest in U.S. History After Ransomware Group Steals 8 TB By AnuPriya February 24, 2026 Categories: Cyber AttackCyber Security NewsCybersecurityData BreachRansomware Conduent Business Services, LLC, a key government technology contractor handling payments, healthcare claims, and back-office tasks, faces massive fallout from a cyber breach. Notification letters started arriving this month to millions of affected Americans. An unauthorized intruder accessed systems from October 21, 2024, to January 13, 2025, stealing files with personal data for tens of millions. Conduent’s April 2025 SEC filing first revealed the incident, but recent state reports show wider impact: 15.4 million in Texas alone (up from 4 million initially), 10.5 million in Oregon, and more elsewhere. Estimates now top 25 million victims, ranking it among 2025’s biggest breaches, though smaller than Change Healthcare’s 193 million cases in 2024. Ransomware Group Claims Responsibility The Safepay ransomware group took credit on its dark web leak site in early 2025. It boasted of exfiltrating over 8 terabytes, some posts claim 8.5 TB of sensitive data, including names, Social Security numbers, addresses, medical histories, and health insurance details. Conduent confirmed data theft but has not verified the ransomware link or exact volume. The group, known for hitting over 73 victims and infecting 260 systems, targets high-value sectors like healthcare and government. No public data dumps have surfaced yet, but the claim underscores rising third-party risks. Texas Attorney General Ken Paxton opened a probe in February 2026, calling it potentially the largest U.S. healthcare breach ever. Conduent reports $25 million in response costs, covered partly by insurance, with no major operational hits. Timeline of the Incident October 21, 2024 – January 13, 2025: Hacker lurks in a limited network segment, exfiltrating client files undetected. January 13, 2025: Conduent detects breach, faces brief disruptions in mailroom, payments, and benefits services. Experts contain it fast, restore systems, and alert law enforcement. April 9, 2025: SEC 8-K filing discloses “threat actor” stole personal data for client end-users; no dark web leaks then. Late 2025 – February 2026: Client notifications roll out; full consumer alerts due by mid-April 2026. Sample letters note no misuse, evidence, and list stolen elements like names and health data. Call 855-291-2608 for help. Conduent-Data-breachDownload Stay alert for identity theft. Monitor credit reports weekly via AnnualCreditReport.com. Add fraud alerts or freezes at Equifax, Experian, and TransUnion. Use unique passwords, enable MFA everywhere, and watch for phishing emails tied to the breach. Conduent regrets the worry and runs a support hotline. This case spotlights vulnerabilities in government contractors. Expect more details as probes continue. Check state AG portals for updates. Follow us on Google News, LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google AnuPriya Any Priya is a cybersecurity reporter at Cyber Press, specializing in cyber attacks, dark web monitoring, data breaches, vulnerabilities, and malware. She delivers in-depth analysis on emerging threats and digital security trends. Recent Articles Cyberattack Targets Poland’s Nuclear Research Center, Investigation Underway Cyber Attack March 16, 2026 Betterleaks: New Open-Source Tool for Scanning Files, Directories, and Git Repositories Cyber Security News March 16, 2026 Android 17 Launches Advanced Protection Mode to Stop Malicious Service Exploits Cyber Security News March 16, 2026 Google Looker Studio Vulnerabilities Enable Attackers to Exfiltrate Data from Google Services Cyber Security News March 16, 2026 Real-Time Phishing Campaigns Use Fake Shipment Alerts To Steal Banking Data In MEA Cyber Security News March 16, 2026 Related Stories Cyber Attack Cyberattack Targets Poland’s Nuclear Research Center, Investigation Underway AnuPriya - March 16, 2026 Cyber Security News Betterleaks: New Open-Source Tool for Scanning Files, Directories, and Git Repositories AnuPriya - March 16, 2026 Cyber Security News Android 17 Launches Advanced Protection Mode to Stop Malicious Service Exploits AnuPriya - March 16, 2026 Cyber Security News Google Looker Studio Vulnerabilities Enable Attackers to Exfiltrate Data from Google Services AnuPriya - March 16, 2026 Cyber Security News Real-Time Phishing Campaigns Use Fake Shipment Alerts To Steal Banking Data In MEA Varshini - March 16, 2026 Cyber Security News Indirect Prompt Injection Attacks Cause OpenClaw AI Agents to Leak Sensitive Data AnuPriya - March 16, 2026 LEAVE A REPLY Comment: Name:* Email:* Website: