Conduent Data Breach Affects 10.5 Million Individuals

Conduent, an American business process outsourcing company, has confirmed a major data breach affecting over 10.5 million individuals. Notifications were filed with the U.S. Attorney General’s offices, revealing the incident’s extensive impact.

Overview of the Conduent Data Breach

The breach was first reported by the Oregon government, which noted that it alone accounts for a significant portion of those affected. In addition to Oregon, other states reported various numbers of impacted individuals, including:

• Texas: 4 million
• Washington: 76,000
• Maine: a couple of hundred

Given Conduent’s extensive service network, the actual number of impacted individuals may be considerably higher than initially reported.

Details of the Exposed Information

The compromised data includes:

• Names
• Social Security Numbers
• Full dates of birth
• Health insurance policy or ID numbers
• Medical information

Despite this significant breach, Conduent has stated that, as of October 24, 2025, there is no evidence indicating that the stolen data has been misused.

Background on Conduent

Founded as a spinoff from Xerox in 2017, Conduent employs approximately 56,000 people across 22 countries. It specializes in digital platforms and services for both government and enterprise clients, reporting an annual revenue of $3.4 billion.

Recent Cybersecurity Incidents

This data breach is not the first cybersecurity struggle for Conduent. Earlier in 2025, the company faced a service outage attributed to a cyber incident. The Safepay ransomware gang later claimed responsibility for this attack. In April 2025, Conduent acknowledged in an SEC filing that hackers had stolen files containing sensitive customer data.

Recommended Actions for Affected Individuals

Individuals who received breach notifications are advised to:

• Obtain credit reports
• Consider placing fraud alerts on their accounts
• Consider implementing a security freeze

It is worth noting that no identity theft protection or credit monitoring services have been provided to the affected individuals in this case.

Recent Findings on Cybersecurity

Recent reports indicate that the vulnerability of environments is a growing concern, with 46% of systems experiencing cracked passwords. This is a significant increase from 25% the previous year. For those interested, the Picus Blue Report 2025 offers a comprehensive analysis of trends in prevention, detection, and data exfiltration.