Conduent Data Breach: $80M Settlement, Who Is Affected, What To Do

Impacted Data:

● Name● Address● Date of Birth● Social Security Number● Medical Information● Health Insurance Information

Conduent Business Services runs benefits, payments and claims processing for health plans and state programs, so most people hit by this breach never did business with the company directly. According to HIPAA Journal, Conduent told federal regulators in June 2026 that 62,224,658 people were affected, which makes this one of the largest healthcare related data breaches on record.

The exposed data includes names, addresses, dates of birth, Social Security numbers and medical and health insurance information. An $80 million class action settlement has now been proposed. This guide explains what happened, who is covered, what you could receive and what to do while the court reviews the deal.

Quick answer

As of November 1, 2026, Conduent has agreed to an $80 million proposed settlement filed on October 16, 2026 in federal court in New Jersey. The court has not approved it yet, and in late October the judge said the approval request lacked the case specific material needed to judge whether the deal is fair. There is no claim form or deadline yet. If you got a Conduent notice, freeze your credit and watch for a settlement notice.

What Happened in the Conduent Data Breach?

An unauthorized party first got into Conduent’s network on October 21, 2024 and stayed inside until January 13, 2025, when the company detected the intrusion and secured its systems. Conduent said it brought in outside cybersecurity experts and later disclosed the incident to the SEC.

The SafePay ransomware group claimed the attack and said it took 8.5 terabytes of data. Conduent says there is no evidence that the underlying data has been misused, posted or made publicly available. Notification letters did not begin until October 2025. Read the full timeline from HIPAA Journal.

How Many People Were Affected by the Conduent Data Breach?

The reported total grew over time. A Wisconsin filing in February 2025 estimated about 25 million people, and the latest figure reported to the Department of Health and Human Services is 62,224,658 people. Texas alone accounts for about 15.5 million residents, according to HIPAA Journal.

When	Reported number
February 2025	About 25 million (Wisconsin filing)
February 2026	More than 25 million
June 2026	62,224,658 (report to HHS)

The number may still rise, since some clients may not have asked Conduent to send notices for them. Your notice may come from Conduent or from the health plan or program that works with it.

What Information Was Exposed?

Conduent says the information varies by person and depends on which client they were connected to. Your notice letter lists exactly what applied to you.

Information reported as exposed:

Names, addresses and dates of birth.
Social Security numbers.
Medical and treatment information.
Health insurance and claims information.

Because Social Security numbers and health details were involved, the risk is not limited to credit fraud. Stolen medical details can be used for medical identity theft and convincing phishing messages that mention your plan or provider. See the FTC identity theft site for recovery steps.

Is There a Conduent Data Breach Settlement?

Yes, a proposed one. According to Top Class Actions, Conduent agreed to an $80 million settlement in In re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey before Judge Michael Farbiarz. Plaintiffs have asked the court for preliminary approval. According to Law360, the judge said the request lacked the case specific materials needed to evaluate whether the deal is fair, so the parties will need to file more before he rules.

Proposed settlement terms:

Total fund: $80 million, which also pays for monitoring, administration and attorney fees.
Documented losses: up to $3,500 per person for out of pocket costs from fraud or identity theft.
Subclass B (about 22 million people): pro rata cash payment, amount depends on funds left.
Subclass A (about 40 million people): one year of credit monitoring, valued at $179.40.
California residents: pro rata payment plus 20 percent.
Attorney fees: lawyers plan to ask for 34 percent of the fund.

Important: This settlement is only proposed. The court must approve it before anyone is paid. Claim deadlines are not set yet, but the proposal says claims would be due 75 days after notice begins. An official settlement website is expected only after approval, so do not trust any site that appears before then.

Who Qualifies for the Conduent Data Breach Settlement?

The class is described as people who received notice that their information may have been affected. In practice, that means anyone who got a Conduent breach letter. The settlement splits the class by how the stolen data was stored. Subclass A is roughly 40 million people whose data sat in hard to access backup files. Subclass B is roughly 22 million people whose data was stored in an easy to access format and who qualify for the cash payment.

You do not have to sign up now. Official notice will be sent if the court approves the deal. To understand the process, read what a class action lawsuit is and how to join a class action lawsuit.

What Are the Conduent Data Breach Lawsuits About?

At least nine class actions were filed in New Jersey federal court in November 2025 and now proceed together. They claim Conduent failed to protect sensitive data, waited too long to notify people and was negligent. They also include breach of contract and unjust enrichment claims.

Regulators looking at Conduent:

Texas Attorney General: opened an investigation on February 13, 2026.
Missouri Department of Commerce: issued insurance bulletins in March and May 2026 saying Conduent was not giving requested information.
HHS Office for Civil Rights: receives HIPAA breach reports and can open its own review.

Tip: Conduent has no public settlement website yet. If you get a text or email saying you can claim Conduent money now, treat it as a scam. Read our guide to class action settlement scams before you click.

What Should You Do After the Conduent Data Breach?

Steps to take now:

Read your notice and keep it. You may need it for a claim.
Freeze your credit with Equifax, Experian and TransUnion. It is free.
Check your free credit reports at AnnualCreditReport.com.
Review health insurance statements and explanations of benefits for services you did not get.
Be careful with calls, texts and emails that mention your plan, benefits or this breach.
Report identity theft at IdentityTheft.gov if you see misuse.

Conduent Data Breach Timeline

Key dates:

October 21, 2024: An unauthorized party first accesses Conduent’s network.
January 13, 2025: Conduent detects the intrusion and secures its systems.
October 2025: Notification letters begin going out.
November 2025: At least nine class actions are filed in New Jersey federal court.
February 13, 2026: The Texas Attorney General opens an investigation.
June 4, 2026: Conduent reports 62,224,658 affected people to federal regulators.
October 16, 2026: The proposed $80 million settlement is filed.

What Happens Next?

The judge will decide whether to grant preliminary approval. If he does, the notice process starts, a settlement website opens and a claim deadline is set, followed by a final approval hearing. We will update this page as soon as there is a ruling. See other active claims in our list of open class action settlements.

Frequently Asked Questions About the Conduent Data Breach

Was I affected by the Conduent data breach?

If you received a letter or email from Conduent or from your health plan, employer or state benefits program about this incident, you are on the affected list. Conduent says it has notified people on behalf of its clients, and the total reported to federal regulators is more than 62 million. If you used a health plan, state program or employer benefit that works with Conduent and got no notice, ask that organization directly.

How many people were affected by the Conduent data breach?

In June 2026 Conduent told the U.S. Department of Health and Human Services that 62,224,658 people were affected, according to HIPAA Journal. Early reports said about 25 million, so the count grew sharply as the investigation continued. The number may still rise because some clients may not have asked Conduent to send notices.

What information was exposed in the Conduent data breach?

Reports say names, addresses, dates of birth, Social Security numbers, medical and treatment information and health insurance information were involved. Exactly which items were exposed depends on the person and the Conduent client they were connected to. Your notice letter lists what applied to you.

When did the Conduent data breach happen?

An unauthorized party first got into Conduent’s network on October 21, 2024 and kept access until January 13, 2025, when Conduent detected the intrusion and secured its systems. Notification letters did not begin going out until October 2025, about nine months after the company found the problem.

Is there a Conduent data breach settlement?

Yes, a proposed one. Conduent agreed to an $80 million settlement filed on October 16, 2026 in federal court in New Jersey. The court has not yet granted preliminary approval, so there is no claim form, no deadline and no payment date yet.

How much could I get from the Conduent data breach settlement?

Under the proposed terms, anyone covered can claim up to $3,500 for documented losses such as fraud or identity theft costs. People in a second group of about 22 million can also claim a pro rata cash payment, which depends on how much money remains. California residents would get that amount plus 20 percent. All class members would be offered a year of credit or medical data monitoring.

How do I file a claim in the Conduent data breach settlement?

You cannot file yet. A settlement website and claim form are expected to go live after the court grants preliminary approval and the notice process starts. Under the proposal, the claim deadline would be 75 days after notice begins. Only use the official website named in the settlement notice, and never pay anyone to file a claim for you.

Is the Conduent data breach settlement real or a scam?

The settlement is real, but it is only proposed and not approved. Scammers often copy news about big settlements, so be careful with texts, emails or sites that ask for a fee, your Social Security number or your bank login to claim money. Our guide to class action settlement scams explains the warning signs.

Does Conduent offer free credit monitoring?

Conduent offered 12 months of free credit monitoring in its notice letters, but the enrollment deadline in the original letters has passed. You can still place a free credit freeze or fraud alert at the three credit bureaus and review your free credit reports at AnnualCreditReport.com. The proposed settlement would also offer monitoring to class members.

Did Conduent pay a ransom?

Conduent has not said. The SafePay ransomware group claimed the attack and listed Conduent on its leak site, then removed it. Conduent says it has no evidence that the underlying data was misused, posted or made public, but those statements do not rule out future misuse.

What should I do after the Conduent data breach?

Read your notice, freeze your credit, check your health insurance statements and explanation of benefits for services you did not receive, watch for phishing that mentions your health plan or benefits, and keep your notice letter in case you need it for a claim. Report identity theft at IdentityTheft.gov.

Sources: HIPAA Journal, HIPAA Journal settlement report, Top Class Actions. This page is for information only and is not legal advice.

Conduent Data Breach: $80 Million Settlement, Who Is Affected and What To Do

Share this article :

What's Going On?

What Can You Do?

Does It Cost Anything?

Potential Compensation