INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Conduent Agrees to Pay $80m Over Data Breach Settlement

| 2026-10-19 14:15 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
Conduent agreed to pay $80m to settle a class action lawsuit following a 2024 cyber incident that breached the personal and health data of around 62 million people. The breach was allegedly perpetrated by the SafePay ransomware gang, which claimed it had stolen 8.5TB of data from Conduent. This attack affected approximately 40 million individuals whose stolen data was stored in complex backup files not readily accessible to third-party actors, and an additional 22 million individuals whose data was stored in files that were easily accessible. The settlement will cover material losses experienced by individual claimants, costs of credit monitoring and medical data monitoring services for each claimant, and the plaintiff's legal fees. If final approval is received from the Court, Conduent will no longer be liable for civil claims relating to the cyber incident and has agreed to strengthen its data security practices as part of the settlement.
Technical Mitigations AI-generated
• Regularly monitor and analyze backup files to detect unauthorized access, such as the complex backup files that were not readily accessible to third-party actors. • Implement robust data encryption techniques to protect sensitive information, including names, addresses, dates of birth, Social Security numbers, health insurance details, and medical information. • Conduct regular vulnerability assessments and penetration testing on systems and networks to identify potential entry points for attackers like the SafePay ransomware gang.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA healthhealth financefinance
Incident Timeline
‎October 2024
Threat actors exfiltrated data that may have included sensitive personal and health information from Conduent, which was not discovered for almost three months after the incident occurred in October 2024.
organisation Social Security
Following analysis of the impacted files, Conduent told affected individuals that an unauthorized actor exfiltrated data that may have included names, addresses, dates of birth, Social Security numbers, health insurance details and medical information.
‎October 16, 2026
Conduent agreed to pay $80m to settle a class action lawsuit over its data breach, which allegedly involved the SafePay ransomware gang stealing 8.5TB of sensitive information from approximately 40 million and 22 million individuals.
target_region United States
A filing submitted to the US District Court for the District of New Jersey on October 16, 2026 explained that the agreement divides the claimants into two subclasses.
target_region Jersey
A filing submitted to the US District Court for the District of New Jersey on October 16, 2026 explained that the agreement divides the claimants into two subclasses.
organisation the US
A filing submitted to the US District Court for the District of New Jersey on October 16, 2026 explained that the agreement divides the claimants into two subclasses.
organisation District Court
A filing submitted to the US District Court for the District of New Jersey on October 16, 2026 explained that the agreement divides the claimants into two subclasses.
industry Health
General Document Context
industry Finance
General Document Context
organisation Third Largest Healthcare Data Breach of All Time
Third Largest Healthcare Data Breach of All Time The attack on Conduent was allegedly perpetrated by the SafePay ransomware gang, which claimed it had stolen 8.5TB of data from the firm.
organisation SafePay ransomware gang
Third Largest Healthcare Data Breach of All Time The attack on Conduent was allegedly perpetrated by the SafePay ransomware gang, which claimed it had stolen 8.5TB of data from the firm.
organisation Court
If the settlement receives final approval from the Court, Conduent will no longer be liable for civil claims relating to the cyber incident.
organisation Conduent
It emphasized that the agreement is not an admission of fault or liability, which Conduent denies.
‎October 16
Conduent agreed to pay $80m as part of a settlement with the US Securities and Exchange Commission.
target_region United States
The settlement agreement was confirmed by Conduent in an 8-K filing form submitted to the US Securities and Exchange Commission (SEC) on October 16.
organisation the US Securities and Exchange Commission
The settlement agreement was confirmed by Conduent in an 8-K filing form submitted to the US Securities and Exchange Commission (SEC) on October 16.
organisation SEC
The settlement agreement was confirmed by Conduent in an 8-K filing form submitted to the US Securities and Exchange Commission (SEC) on October 16.
‎2026/10/19
Threat actors breached the personal and health data of around 62 million people, prompting Conduent to agree on a $80m settlement.
organisation Settle Data Breach Class Action
Conduent Agrees to Pay $80m to Settle Data Breach Class Action.
financial $80 Conduent
Conduent Agrees to Pay $80m to Settle Data Breach Class Action.
Digital platform provider Conduent has agreed to pay $80m to settle a class action lawsuit following a 2024 cyber incident that breached the personal and health data of around 62 million people.
organisation Digital
Digital platform provider Conduent has agreed to pay $80m to settle a class action lawsuit following a 2024 cyber incident that breached the personal and health data of around 62 million people.
‎October 2026
The Health Insurance Portability and Accountability Act (HIPAA) journal ranks the 2024 ransomware attack on Change Healthcare as the third largest healthcare data breach of all time.
organisation The Health Insurance Portability
The Health Insurance Portability and Accountability Act (HIPAA) journal ranks the incident as the third largest healthcare data beach of all time, as of October 2026, due the number of individuals’ protected health information that was compromised.
organisation HIPAA
This is followed by an incident which hit US health insurance giant Anthem in 2015, which HIPAA recorded as breaching the data of 78.8 million people.
Tactical Metrics
Metrics
financial
80,000,000
Financial Impact / Stolen Funds
Conduent Agrees to Pay $80m to Settle Data Breach Class Action.
Digital platform provider Conduent has agreed to pay $80m to settle a class action lawsuit following a 2024 cyber incident that breached the personal and health data of around 62 million people.
Intelligence Sources
Infosecurity-Magazine 2026-10-19