A massive data breach at Conduent Business Services, one of the largest healthcare data processors in the country, has exposed the personal and medical information of more than 25 million people. At least 10 federal class action lawsuits have been filed so far, and a March 31, 2026 deadline is approaching for free credit monitoring enrollment.
Status: Multiple Lawsuits Filed — No Settlement Yet | Credit Monitoring Deadline: March 31, 2026
What Happened?
Between October 21, 2024 and January 13, 2025, hackers penetrated Conduent’s systems in an attack attributed to the SafePay ransomware group. Conduent processes health insurance claims and related data for some of the largest insurers in the United States, meaning the breach rippled across multiple healthcare organizations and state programs.
The scale of the breach makes it the eighth-largest healthcare data breach in U.S. history. The exposed information includes names, dates of birth, Social Security numbers, medical diagnoses, treatment codes, and health insurance details — the kind of data that can be used for identity theft and medical fraud for years to come.
Which Insurance Companies Were Affected?
Because Conduent processes data for many different health plans, the breach affected customers of several major insurers:
- Blue Cross Blue Shield of Texas — by far the largest group, with an estimated 14.7 million affected individuals in Texas alone
- Blue Cross Blue Shield of Montana
- Premera Blue Cross
- Humana
- Various state Medicaid programs that use Conduent for claims processing
If you have health insurance through any of these organizations, there is a reasonable chance your data was involved. Many affected individuals have already received notification letters in the mail.
What Data Was Exposed?
- Full names
- Dates of birth
- Social Security numbers
- Medical service information, including diagnosis codes and treatment records
- Health insurance plan details and member ID numbers
The combination of financial and medical data makes this breach particularly dangerous. Stolen health records can be used to commit medical identity theft — where someone uses your information to receive medical treatment, file false insurance claims, or obtain prescription drugs in your name.
Free Credit Monitoring — Deadline March 31, 2026
Conduent is offering affected individuals two years of free credit monitoring through a third-party service. The enrollment deadline is March 31, 2026. If you received a breach notification letter, it should contain instructions and an enrollment code.
This deadline is separate from any future settlement. Even if a class action settlement is eventually reached, enrolling in the free credit monitoring now gives you immediate protection while the legal process plays out.
What Should You Do Right Now?
- Enroll in the free credit monitoring before March 31, 2026 if you received a notification letter
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion — both are free and can prevent new accounts from being opened using your stolen information
- Review your medical records and insurance statements (called Explanation of Benefits) for any services, prescriptions, or claims you do not recognize
- Keep records of any expenses you incur because of the breach — these could be relevant to a future settlement claim
- Be cautious of phishing emails and calls that reference the breach and ask for additional personal information
Where Do the Lawsuits Stand?
More than 10 federal class action lawsuits have been filed against Conduent in multiple courts. The cases are in their early stages, with discovery just beginning. There is no settlement on the table yet, and it will likely be months or years before one is reached.
Given the massive size of the breach and the sensitivity of the data involved, legal experts expect significant settlement demands. We will update this page as the litigation progresses.
Case Details
| Defendant | Conduent Business Services LLC |
| Breach Period | October 21, 2024 — January 13, 2025 |
| People Affected | Over 25 million |
| Lawsuits Filed | 10+ federal class actions |
| Credit Monitoring Deadline | March 31, 2026 |
| Status | Early litigation — no settlement yet |
By Steve Levine | Published: February 17, 2026
Legal Disclaimer
This article is for informational purposes only and does not constitute legal advice. If you received a breach notification from Conduent or your health insurer, consult with a qualified attorney about your options. OpenClassActions.org is a consumer news site and is not a law firm.
Related News on OpenClassActions
- Conduent Data Breach Exposes 181,000+ New Hampshire Residents and Volvo Employees
- Covenant Health Data Breach Class Action Lawsuit
- Precipio Healthcare Data Breach Class Action Settlement
- Gryphon Healthcare $2.8 Million Patient Data Breach Class Action Settlement
- Bayhealth Medical Center $2.5 Million Data Breach Class Action Settlement