EXPLORINEER
en

Archive — US — techcrunch

Data breach at govtech giant Conduent balloons, affecting millions moreAmericans

A significant data breach at Conduent, a major government tech provider, now affects potentially over 15.4 million Texans and an additional 10.5 million Oregonians, impacting millions of personal records. The ransomware attack, initially disclosed in April 2025, compromised names, Social Security numbers, and health information. Conduent's delayed communication leaves many questions unanswered as they work to address the fallout.

Key points

  • The January 2025 ransomware attack affected Conduent's operations and was initially reported to impact 4 million people in Texas.
  • Updated assessments now indicate 15.4 million people in Texas and 10.5 million in Oregon have had their data compromised.
  • The stolen data includes names, Social Security numbers, medical details, and health insurance information.
  • Conduent is one of the largest government contractors, managing sensitive information for corporations and government entities.
  • The attack was claimed by the Safeway ransomware gang, who alleged they stole over 8 terabytes of data.
  • Conduent has been criticized for their lack of transparency in addressing the breach and the number of affected individuals.
  • Notification to victims is ongoing, with a plan to conclude by early 2026.

Why it matters

  • Cybersecurity incidents like this are increasingly common, reflecting 2025's trends of heightened attacks on government infrastructures and the growing importance of data privacy.
  • Ransomware continues to evolve, with organizations underprepared for the scale of attacks seen with Conduent.
  • Similar incidents have occurred in the past, such as those impacting major health organizations and government agencies, highlighting vulnerabilities in handling sensitive information.

The Conduent data breach illustrates a critical failure in cybersecurity for a major tech provider handling sensitive data, raising concerns about data protection, transparency, and the evolving threat landscape in government contracting.