A data breach at government services contractor Conduent now affects more than 25 million Americans. New state filings reveal a significantly larger scope than initial reports suggested. The incident occurred between October 2024 and January 2025. Hackers accessed sensitive personal information, including Social Security numbers, medical records, and health insurance data.
The breach impacted 15.4 million residents in Texas. Oregon reported 10.5 million affected individuals. The SafePay ransomware group claimed responsibility for the attack. The group stated they exfiltrated approximately 8 terabytes of data.
Conduent has incurred at least $25 million in costs related to the breach response. The Texas Attorney General has launched an investigation into the event. Officials describe the incident as potentially the largest data breach in U.S. history.