Conduent Data Breach Affects Millions
Summary
Hide ▲
Show ▼
Conduent, a business services provider, has confirmed that a data breach in 2024 impacted over 10.5 million individuals. The breach, initially disclosed in January 2025, affected government agencies in multiple US states. The attackers accessed Conduent's network on October 21, 2024, and were evicted on January 13, 2025. The compromised data includes names, addresses, dates of birth, Social Security numbers, health insurance details, and medical information. Conduent serves over 600 government and transportation organizations, and roughly half of Fortune 100 companies. The company has not provided an exact number of affected individuals, but breach notices indicate at least 10.5 million people were impacted, with the largest number in Oregon (10.5 million) and over 4 million in Texas. The Safepay ransomware group claimed responsibility for the attack in February 2025 and claimed to have stolen 8.5TB of data. Conduent provides services to several other states where specific data breach figures aren't published, potentially increasing the actual impact. As of October 24, 2025, there is no evidence that the stolen data has been misused. Additionally, Ingram Micro, a major IT services provider, revealed a ransomware attack in July 2025 that affected over 42,000 individuals. The SafePay ransomware group was behind this attack, claiming to have stolen 3.5TB of documents. The attack triggered a massive outage and highlighted SafePay's growing activity as a significant ransomware threat.
Timeline
-
19.01.2026 15:33 1 articles · 23h ago
Ingram Micro ransomware attack affects 42,000 individuals
Ingram Micro suffered a ransomware attack on its systems in July 2025, affecting over 42,000 individuals. The SafePay ransomware group was behind the attack, claiming to have stolen 3.5TB of documents. The attack triggered a massive outage and highlighted SafePay's growing activity as a significant ransomware threat.
Show sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
30.10.2025 20:38 2 articles · 2mo ago
Conduent confirms breach impacts 10.5 million individuals
The breach impacted over 4 million individuals in Texas, 76,000 in Washington, and several hundred in Maine.
Show sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
30.10.2025 15:01 3 articles · 2mo ago
Conduent Data Breach Affects Millions
The breach impacted over 4 million individuals in Texas, 76,000 in Washington, and several hundred in Maine. The Safepay ransomware group claimed to have stolen 8.5TB of data. Conduent has filed with various state attorney general offices regarding the data breach.
Show sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
Information Snippets
-
Conduent detected the breach on January 13, 2025, and the attackers were evicted from the network on the same day.
First reported: 30.10.2025 15:013 sources, 3 articlesShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
The attackers accessed Conduent’s network on October 21, 2024.
First reported: 30.10.2025 15:013 sources, 3 articlesShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
The compromised data includes names, addresses, dates of birth, Social Security numbers, health insurance details, and medical information.
First reported: 30.10.2025 15:013 sources, 3 articlesShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
Conduent serves over 600 government and transportation organizations, and roughly half of Fortune 100 companies.
First reported: 30.10.2025 15:012 sources, 2 articlesShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
At least 4.5 million individuals were impacted by the breach, with the largest number in Texas (4 million).
First reported: 30.10.2025 15:011 source, 1 articleShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
-
The Safepay ransomware group claimed responsibility for the attack in February 2025.
First reported: 30.10.2025 15:013 sources, 3 articlesShow sources
- Millions Impacted by Conduent Data Breach — www.securityweek.com — 30.10.2025 15:01
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
The breach impacted over 10.5 million individuals, with the largest number in Oregon (10.5 million).
First reported: 30.10.2025 20:382 sources, 2 articlesShow sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
The compromised data includes names, Social Security Numbers, full date of birth, health insurance policy or ID number, or medical information.
First reported: 30.10.2025 20:381 source, 1 articleShow sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
-
Conduent provides services to several other states where specific data breach figures aren't published, potentially increasing the actual impact.
First reported: 30.10.2025 20:381 source, 1 articleShow sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
-
As of October 24, 2025, there is no evidence that the stolen data has been misused.
First reported: 30.10.2025 20:381 source, 1 articleShow sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
-
Conduent suffered a service outage at the start of the year, which was caused by a cybersecurity incident.
First reported: 30.10.2025 20:381 source, 1 articleShow sources
- BPO giant Conduent confirms data breach impacts 10.5 million people — www.bleepingcomputer.com — 30.10.2025 20:38
-
The data breach impacted over 4 million individuals in Texas, 76,000 in Washington, and several hundred in Maine.
First reported: 31.10.2025 17:151 source, 1 articleShow sources
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
Conduent has filed with various state attorney general offices regarding the data breach.
First reported: 31.10.2025 17:151 source, 1 articleShow sources
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
The SafePay ransomware group claimed to have stolen 8.5TB of data.
First reported: 31.10.2025 17:151 source, 1 articleShow sources
- Conduent Data Breach Impacts Over 10.5 Million Individuals — www.infosecurity-magazine.com — 31.10.2025 17:15
-
Ingram Micro suffered a ransomware attack on its systems in July 2025, affecting over 42,000 individuals.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
The attackers stole documents containing personal information such as Social Security numbers, government-issued identification numbers, and employment-related information.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
The attack triggered a massive outage that took down Ingram Micro's internal systems and website.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
The SafePay ransomware gang was behind the attack and claimed to have stolen 3.5TB of documents.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
SafePay surfaced in September 2024 as a private operation and has since added hundreds of victims to its leak site.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
SafePay is known for its double-extortion tactics, stealing sensitive documents before encrypting victims' systems and threatening to leak the stolen files online if a ransom is not paid.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
-
Since the start of 2025, SafePay has become one of the most active ransomware groups.
First reported: 19.01.2026 15:331 source, 1 articleShow sources
- Ingram Micro says ransomware attack affected 42,000 people — www.bleepingcomputer.com — 19.01.2026 15:33
Similar Happenings
700Credit Data Breach Exposes 5.8 Million Records via Compromised API
700Credit, a major credit report and identity verification service, disclosed a data breach affecting 5,836,521 individuals. The breach, linked to a compromised third-party API, occurred between May and October 2025. Hackers accessed personal information, including names, addresses, dates of birth, and Social Security numbers, through a partner's system compromised in July 2025. The incident was contained to the 700Dealer.com application layer, and the company is offering affected individuals 12 months of free credit monitoring and identity restoration services. 700Credit began notifying impacted dealership clients on November 21 and will notify affected individuals starting December 22. The company has collaborated with the National Automobile Dealers Association (NADA) and reported the incident to the Federal Trade Commission (FTC), FBI, and various state attorney general offices. 700Credit serves over 23,000 automotive, RV, Powersports, and Marine dealer customers. The breach was due to a failure to validate consumer reference IDs against the original requester, and the attacker exfiltrated around 20% of consumer data. 700Credit revealed the breach in a notification to the Maine Office of the Attorney General (OAG) and advised affected customers to place a fraud alert and security freeze on their credit file.
Marquis Software Solutions Ransomware Attack Exposes Data from 74 US Financial Institutions
Marquis Software Solutions, a financial software provider, suffered a ransomware attack on August 14, 2025, through a compromised SonicWall firewall. The breach impacted over 74 US banks and credit unions, exposing personal information of approximately 400,000 customers. The stolen data includes names, addresses, phone numbers, Social Security numbers, financial account information, and dates of birth. Marquis has since taken steps to enhance its security measures, but there is no evidence of data misuse or publication. The attack is suspected to be linked to the Akira ransomware gang, which has been targeting SonicWall VPN devices.
Merkle Breach Exposes Employee and Client Data
Merkle, a US-based subsidiary of Dentsu, experienced a cyberattack resulting in the theft of sensitive employee and client data. The breach was detected through unusual network activity, prompting an incident response and investigation. The stolen data includes bank details, payroll information, and personal contact details. Merkle has notified affected individuals and law enforcement, and is offering credit monitoring and Dark Web monitoring to impacted employees. The nature of the attack remains unknown, but it may involve data extortion or ransomware. The incident highlights the ongoing threat of data theft and the importance of robust incident response protocols.
SimonMed Imaging Data Breach Affects 1.2 Million Patients
SimonMed Imaging, a U.S. medical imaging provider, experienced a data breach in January 2025. The breach exposed sensitive information of over 1.2 million individuals. The unauthorized access occurred between January 21 and February 5, 2025. The company detected the breach on January 27 and took immediate steps to contain the situation. The Medusa ransomware group claimed responsibility for the attack and leaked some data as proof. The breach impacted patients across 11 U.S. states, where SimonMed operates approximately 170 medical centers. The company has not confirmed the exact nature of the stolen data but acknowledged the potential for highly sensitive information to have been compromised. SimonMed has offered affected individuals free identity theft protection services.
Doctors Imaging Group Data Breach Affects 171,000 Individuals
Doctors Imaging Group, a radiology practice with locations in Palatka and Gainesville, Florida, disclosed a data breach that occurred between November 5 and November 11, 2024. The breach impacted over 171,000 individuals, exposing sensitive personal and medical information. The breach was discovered nearly a year later, in late August 2025. The compromised data includes names, addresses, dates of birth, Social Security numbers, financial account numbers, patient account numbers, medical record numbers, health insurance information, medical treatment information, and medical claim information. The investigation did not confirm the involvement of a ransomware group, and no cybercrime gang has claimed responsibility for the attack.