Conduent Vendor Breach Swells Past 25 Million People After New State Disclosures

Overview

• Fresh filings place the toll at more than 25 million people nationwide, with about 15.4 million in Texas and roughly 10.5 million in Oregon.
• Conduent says an unauthorized party accessed its systems from October 21, 2024 to January 13, 2025 and obtained files tied to services it provides for clients.
• The company reports exposed data may include names, Social Security numbers, medical details, and health insurance information, though not every element for every person.
• The SafePay ransomware group has claimed the attack, and reporting cites roughly 8 TB of data exfiltrated during the months‑long intrusion.
• Conduent says it secured its network, notified law enforcement, and is sending letters and operating a helpline at 855‑291‑2605, while Texas Attorney General Ken Paxton labeled it likely the largest U.S. breach and signaled scrutiny.