Conduent Confirms Data Breach Exposing Over 10 Million People

Business process outsourcing (BPO) firm Conduent has acknowledged a major data breach that potentially exposed personal information of more than 10 million individuals. Forensic analysis showed the breach began in October 2024 but was only discovered in January 2025, after multiple state agencies, including the Wisconsin Child Support Trust Fund, reported disruptions in their systems.

Details of the Breach

Cybercriminals accessed Conduent's network for nearly three months undetected. The compromised data included names, Social Security numbers, birthdates, medical records, and health insurance information.

While Conduent initially found no signs of data misuse, it admitted there remains a significant risk of identity theft and financial fraud.

Company Response and Impact

Conduent has already spent approximately US $25 million on direct response efforts and is still facing possible legal challenges and damage to its reputation.

Cybersecurity Insights

Experts link the attack to a ransomware group identified as SafePay, which in February 2025 took responsibility, claiming to have extracted 8.5 terabytes of data. They threatened to leak or trade the information unless their demands were met.

Affected Clients

Several government agencies
Healthcare clients including Blue Cross Blue Shield in Montana and Texas
Multiple state agencies

Summary: Conduent's extensive breach exposing over 10 million people highlights ongoing cybersecurity vulnerabilities and the high cost of data protection failures.

Nearshore Americas — 2025-11-05