Was It Breached Secria

Recent breaches

Conduent data breach: why you got a letter, and what to do

Conduent does back-office work for health plans and state agencies. Its report to federal health regulators covers 62,224,658 people, as of 28 October 2026.1

Secure Processing Center
P.O. Box 3826
Suwanee, GA 30024

Date

Re: Notice of Data Incident

Dear Full name:

On behalf of our clients, Conduent Business Services, LLC provides third-party printing/mailroom services, document processing services, payment integrity services, and other back-office support services. ... due to the services that we provide to Client name

What Information Was Involved. The affected files contained your name and the following: Data elements

... call our dedicated assistance line Phone number ... or write to us at Attn: Data Incident, 100 Campus Drive, Suite 200, Florham Park, New Jersey 07932.

  1. The return addressConduent's filed sample letter comes from a Secure Processing Center in Suwanee, Georgia, under the heading "Re: Notice of Data Incident".2
  2. The client is namedEach letter names the client whose files held your data, usually a health plan or a state program. That's why you got it.2
  3. Your own list of what leakedThe data elements are filled in per person, so your letter is the record of what was involved for you.2
  4. The phone number variesThe number is filled in per letter too. To check it, call the client named in your letter on a number you look up yourself.2,7

The letter is drawn from the sample Conduent filed with California's attorney general. Checked 28 October 2026 against the sources.

The facts, as filed

"The company says" marks Conduent's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says an unauthorized third party had access to its environment from 21 October 2024 to 13 January 2025 and obtained files associated with its clients.2
People affected
62,224,658 in Conduent's report to the HHS breach portal, filed 8 October 2025, as of 28 October 2026.1 Its revised Texas filing, published 20 May 2026, counts 12,784,367 Texans.4
What leaked
Varies by client and person. The revised Texas filing lists names, addresses, Social Security and driver's license numbers, financial account details, medical and health insurance information, and dates of birth.4
Letters
California lists nine Conduent filings, from 8 October 2025 to 27 April 2026.3
Monitoring offer
The California sample letters we read offer no credit monitoring. They list free steps: credit reports, fraud alerts and credit freezes.2
Investigation
On 12 February 2026 the Texas attorney general issued civil investigative demands to Conduent and Blue Cross Blue Shield of Texas, citing about four million Texans at the time.5
Lawsuit
On 16 October 2026 Conduent signed an $80 million class action settlement in In re: Conduent Business Services Data Breach Litigation, in federal court in New Jersey. The company says it denies fault, and the deal still needs the court's approval.6

Why the letter came so late

Conduent spent most of 2025 working out whose data was in the files. The dates come from its filings.

  1. Access to Conduent's network begins, the company says.2

  2. Conduent discovers the incident and secures its network.2

  3. First filings with HHS and California's attorney general.1,3

  4. California's ninth and latest Conduent filing.3

  5. Conduent signs a proposed $80 million settlement.6

What to do if you got a Conduent letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Read who the client is.The letter names it. Contact that client, or Conduent at the address in the letter, if something doesn't add up.2
  2. Social Security number listed: freeze your credit.While a freeze is in place, nobody can open a new credit account in your name. It's free to place and to lift.7
  3. Get an IRS identity protection PIN.The six-digit IP PIN stops someone else filing a tax return with your Social Security number.8
  4. Health insurance details listed: call your insurer.Report it and ask for a new card if needed. For Medicare, call 1-800-MEDICARE (1-800-633-4227).7

Questions people ask

Is the Conduent data breach letter real?

Conduent has filed samples of its letter with California's attorney general, which posts them. Compare yours: the return address, the "Notice of Data Incident" heading and the client named in the first paragraph.2,3 A letter isn't a reason to pay anyone or give your Social Security number over the phone.7

What companies were affected by the Conduent breach?

Conduent's letters name the client whose files were involved, so yours tells you which one. Conduent hasn't published a full client list.2 Blue Cross Blue Shield of Texas is one client the Texas attorney general named.5

Is there a Conduent data breach settlement?

A proposed one. Conduent agreed on 16 October 2026 to fund $80 million, covering payments to class members, credit and medical data monitoring, lawyers' fees and the cost of running it. It still needs the court's approval, so there's nothing to claim yet. A real claim process will come with a court-approved notice that names the case.6 This isn't legal advice.

Sources 8
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 28 October 2026.
  2. Conduent Business Services, LLC: filing and sample notice (reported 27 April 2026), California Attorney General. Read 28 October 2026.
  3. Search data security breaches: Conduent, California Department of Justice, Office of the Attorney General. Read 28 October 2026.
  4. Data Security Breach Reports, Office of the Texas Attorney General. Conduent's revised submission, published 20 May 2026. Read 28 October 2026.
  5. Attorney General Ken Paxton demands information from Blue Cross Blue Shield of Texas and Conduent (12 February 2026), Office of the Texas Attorney General. Read 28 October 2026.
  6. Form 8-K, Item 1.01, filed 16 October 2026, Conduent Incorporated, via SEC EDGAR. Read 28 October 2026.
  7. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 28 October 2026.
  8. Get an identity protection PIN (IP PIN) (reviewed 4 August 2026), Internal Revenue Service. Read 28 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check