Conduent agrees to pay $80 million to settle breach class action
Original title: Conduent Agrees to Pay $80m to Settle Data Breach Class Action
About 62 million people were affected; only documented fraud losses can be reimbursed, up to $3,500.
Conduent agreed to pay $80 million to settle a class action over an October 2024 incident that exposed personal and health data of about 62 million people. A filing in the US District Court for the District of New Jersey on October 16, 2026, splits claimants into about 40 million whose data sat in hard-to-use backup files and 22 million whose files were readily accessible. Conduent confirmed the deal in an SEC 8-K, denied fault, said cyber insurance should cover it, and agreed to strengthen security. Final court approval would end related civil claims. SafePay allegedly claimed it stole 8.5 TB; Conduent found the intrusion nearly three months later.
Unconfirmed: SafePay’s claim of stealing 8.5 TB is alleged, and Conduent denies fault or liability.
- Stolen data may include names, addresses, dates of birth, Social Security numbers, and medical details.
- HIPAA Journal ranks it the third-largest healthcare data breach as of October 2026.
- The settlement also covers credit and medical monitoring plus plaintiffs’ legal fees.
- Conduent supports about 100 million US residents across government health programs.
Impact: Personal, Social Security, insurance, and medical data of about 62 million people
- Threat actors
- SafePay
- Victims
- Conduent
- Organizations
- US Securities and Exchange Commission
- Countries
- United States
From the original article
2 min read at infosecurity-magazine.com
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.