Breachesby GlyphConduent Business Services
Disclosed Oct 8, 202562,486,662 affectedConfirmed
What is known
| People affected | 62,486,662 (as reported by the organization) |
|---|---|
| Disclosed | Oct 8, 2025 |
| Discovered | Jan 13, 2025 |
| Happened | Jan 13, 2025 |
| Attack | Ransomware |
| Data exposed | NamesHealthSocial Security numbersInsurancePayment cardsFinancialDates of birthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Conduent Business ServicesWashington Attorney General breach notice: Conduent Business ServicesNotice letter filed with the Delaware DOJ: Conduent Business ServicesOregon DOJ breach notice: Conduent Business ServicesHHS OCR breach report: Conduent Business Services (Business Associate, NJ)Texas Attorney General data security breach report BR-0005045: Conduent Business ServicesVermont Attorney General: 2026-03-24 Conduent Business Services, LLC - Data Breach Notice to ConsumersVermont Attorney General: 2026-02-02 Conduent Business Services Data Breach Notice to ConsumersVermont Attorney General: 2026-01-02 Conduent Business Services Data Breach Notice to ConsumersVermont Attorney General: 2025-10-24 Conduent Business Services Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: Conduent Business Services
Notices filed
California AGCount not statedHHS OCR62,224,658 peopleCalifornia AGCount not statedWashington AG786,927 peopleDelaware DOJ3,652 peopleOregon DOJ10,515,849 peopleVermont AGCount not statedIndiana AG5,892 peopleCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedVermont AGCount not statedCalifornia AGCount not statedVermont AGCount not statedCalifornia AGCount not statedVermont AGCount not statedCalifornia AGCount not statedTexas AG12,784,367 people
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-10-24-conduent-business-services-data-breach-notice-consumersby backfillSource
empty to https://ago.vermont.gov/document/2026-01-02-conduent-business-services-data-breach-notice-consumersby backfillSource
empty to https://ago.vermont.gov/document/2026-02-02-conduent-business-services-data-breach-notice-consumersby backfillSource
empty to https://ago.vermont.gov/document/2026-03-24-conduent-business-services-llc-data-breach-notice-consumersby backfillSource
["names","health"] to ["names","health","ssn","insurance","payment-card","financial","dob","addresses"]by backfillSource
hhs to organizationby backfillSource
62224658 to 62486662by backfillSource
other to healthby backfillSource
["names"] to ["names","health"]by backfillSource
organization to hhsby backfillSource
59 to 62224658by backfillSource
[] to ["names"]by backfillSource
empty to organizationby backfillSource
empty to 59by backfillSource
unknown to ransomwareby backfillSource
empty to 2025-01-13by backfillSource
2025-10-24 to 2025-10-08by backfillSource
2025-10-31 to 2025-10-24by backfillSource
2025-11-19 to 2025-10-31by backfillSource
2025-12-18 to 2025-11-19by backfillSource
2026-01-02 to 2025-12-18by backfillSource
2026-01-30 to 2026-01-02by backfillSource
2026-03-24 to 2026-01-30by backfillSource
2026-04-27 to 2026-03-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.