Conduent Data Breach Could Be Largest in U.S. History as Millions Receive Notices

The Conduent Data Breach is being treated as a potentially record-setting incident after state authorities described it as the largest data breach in U. S. history and notification letters began going out to affected people. The breach concerns a third-party back-office services provider and has triggered widespread concern because personal, financial and medical information may have been exposed; free credit monitoring is being offered to those notified with a sign-up deadline in 2026.

Conduent Data Breach: scope, timeline and who is affected

The incident involves a company that provides third-party printing, mailroom and back-office support services. The company discovered it had been the victim of a cyber attack on January 13, 2025. An investigation determined that hackers had access to sensitive data from October 21, 2024, through January 13, 2025.

Count tracking maintained by a state-level justice office has passed the 10 million mark for people affected. Notifications have been sent to individuals in multiple states, including Georgia, South Carolina, New Jersey, New Hampshire, Maine, Massachusetts and New Mexico. The breach impacted customers of large corporate clients that used the company’s services, including a major health insurer in Texas where millions of customers were affected.

The types of information exposed vary by individual. Some recipients of notification letters were told that addresses and Social Security numbers were accessed. Other customers were advised that medical data and health insurance information were exposed. Notice letters do not identify which client engaged the service provider, leaving many people unable to trace the original source of their compromised data.

What affected people should do next

Notification letters include instructions for obtaining one year of free credit monitoring; individuals must sign up by April 30, 2026 to access the monitoring services. The letters also include a phone number for questions: 877-332-1658. That line is available Monday through Friday from 9 a. m. to 9 p. m. Eastern Time.

Officials stress that people should not discard the notification letters, emphasizing that the correspondence is legitimate and not a scam. The letters contain specific steps and unique sign-up information for each recipient, so those who receive them must follow the instructions provided in their own notice to enroll in the credit monitoring benefit.

Security experts recommend taking protective measures after a data breach to reduce the risk of identity theft. Recent updates indicate standard protective guidance is relevant here, and affected individuals should use the enrollment window for free monitoring while preserving their notification materials for future reference.

Implications and next steps

The breadth of the incident—encompassing millions of people and multiple states—underscores the risks posed when third-party vendors handle large volumes of sensitive data. The lack of client identification in the letters complicates efforts for some people to determine which organization originally held their records, and may affect the speed and precision of individual responses.

For now, those who believe they may be affected should retain any notification letters, enroll in the offered credit monitoring before the April 30, 2026 deadline, and use the provided helpline for questions. Details may continue to develop as the investigation and notification process proceeds; affected people should monitor their mail and the guidance in their specific notices for any updates.

• Discovery date: company identified the attack on January 13, 2025.
• Exposure window: October 21, 2024 to January 13, 2025.
• Number affected: count has surpassed 10 million people.
• States with reported notifications: Georgia, South Carolina, New Jersey, New Hampshire, Maine, Massachusetts, New Mexico.
• Types of exposed data: addresses, Social Security numbers, medical and health insurance information (varies by individual).
• Free credit monitoring: available for one year; sign-up deadline April 30, 2026. Helpline: 877-332-1658 (Mon–Fri, 9 a. m. –9 p. m. ET).