Conduent data breach
Was I affected?
Conduent confirmed a breach affecting about 25 million people, exposing names, Social Security numbers, dates of birth and medical information. You may be affected if you received a Conduent letter; these often relate to state programs (Medicaid, SNAP/EBT, child support, unemployment) or health plans that use Conduent.
| Announced | Oct 24, 2025 |
|---|---|
| When it happened | October 21, 2024 - January 13, 2025 |
| People affected | 25 million |
| Data exposed | Names, Social Security numbers, Dates of birth, Medical information, Health insurance details and Addresses |
| Status | Confirmed by the company or a regulator filing |
What happened
Conduent, a contractor that runs Medicaid, benefits, toll and child-support processing for many US states and insurers, found in January 2025 that attackers had been inside its network since October 2024. Notices that began in October 2025 said names, Social Security numbers, birth dates and medical and insurance information were taken; early state filings totaled about 10.5 million people and later filings pushed reported totals past 25 million. The SafePay ransomware gang claimed the attack.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
- Read every Explanation of Benefits from your health insurer and report any visit, test or prescription you never had.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
Check the other services you use →
Sources
- Conduent data breach impacts over 10.5 million individuals · Infosecurity Magazine (news)
- The Conduent breach; from 10 million to 25 million (and counting) · Malwarebytes (news)
- Washington AG data breach notifications (Conduent Business Services LLC) · Washington State Attorney General (regulator)