Conduent Data Breach Impacts at Least 25M People

The breach at the government contractor has compromised personal data across multiple states.

Published on Feb. 24, 2026

Got story updates? Submit your updates here. ›

A ransomware attack on government contractor Conduent has led to the theft of personal data for at least 25 million people across the United States. The breach has affected individuals' names, dates of birth, addresses, Social Security numbers, health insurance information, and medical data. Conduent has provided limited information about the incident, making it difficult for affected individuals to learn more.

Why it matters

As one of the largest government contractors in the U.S., Conduent handles sensitive personal data for millions of people receiving state benefits and workplace/unemployment services. This breach highlights the significant risks posed by cyberattacks on large organizations entrusted with such sensitive information, and the challenges in transparency and accountability when these incidents occur.

The details

The Conduent breach was first disclosed in October 2025, with the company publishing a notice on its website that was hidden from search engines. Since then, data breach notifications have revealed the breach has impacted at least 25 million people across multiple states, including 10.5 million in Oregon and 15.4 million in Texas. The stolen data includes names, dates of birth, addresses, Social Security numbers, health insurance details, and medical information.

  • The ransomware attack on Conduent occurred in January 2025.
  • Conduent published its initial data breach notice in October 2025.

The players

Conduent

A large government contractor that provides printing, mailroom services, and document and payment processing for state benefit programs and workplace/unemployment services, handling personal data for over 100 million people.

Sean Collins

A spokesperson for Conduent.

Got photos? Submit your photos here. ›

The takeaway

This breach highlights the significant risks and challenges faced by large organizations entrusted with sensitive personal data, especially government contractors like Conduent. The lack of transparency and accountability from the company has made it difficult for affected individuals to understand the full scope of the incident and protect themselves.