Overview
- Filings show Oregon reported 10.5 million impacted, with additional counts including roughly 4 million in Texas, 76,000 in Washington, and several hundred in Maine.
- Some reporting cites a different Texas figure of more than 400,000 affected, underscoring discrepancies in published state totals.
- Conduent says an unauthorized party accessed its systems from October 21, 2024, until discovery on January 13, 2025, with the breach first disclosed publicly in an April SEC filing.
- Notifications state exposed data may include names, Social Security numbers, full dates of birth, medical information, and health insurance identifiers.
- The SafePay ransomware group claimed responsibility and said it stole 8.5 TB of data, while Conduent’s notices say there is no evidence of data misuse as of October 24 and offer no credit monitoring.