A significant data breach at Conduent, a major government technology contractor, has been revealed to affect millions more Americans than initially reported. The ransomware attack, which disrupted Conduent’s operations for several days in January, now appears to have compromised the personal data of tens of millions across multiple states.
Initially, Conduent disclosed that approximately 4 million residents of Texas were impacted. However, recent information from state officials reveals that at least 15.4 million Texans—about half the state’s population—have been affected. Similarly, Oregon’s attorney general confirmed that around 10.5 million residents were exposed in the breach, dramatically expanding the scope of the incident.
Expanding Scope Across Multiple States
Beyond Texas and Oregon, hundreds of thousands of individuals in Delaware, Massachusetts, New Hampshire, and other states have also received breach notifications. These alerts stem from data breach disclosures reviewed by cybersecurity news sources. The stolen information is highly sensitive, including names, Social Security numbers, medical records, and health insurance details.
Conduent handles a vast array of sensitive personal information on behalf of corporate clients, government agencies, and state programs. The firm’s technology supports over 100 million U.S. residents through government healthcare initiatives and other services, highlighting how deeply the breach could impact the population.
Limited Disclosure from Conduent
Despite the severity, Conduent has been opaque regarding precise details of the breach. A company spokesperson declined to clarify the total number of affected individuals or the volume of breach notifications sent. The organization confirmed that it is analyzing the compromised files to better understand the extent of leaked personal information but did not confirm whether the total count surpasses 100 million individuals.
The breach was publicly disclosed months after the initial cyberattack, which caused widespread service outages in several government programs. The Safeway ransomware gang claimed responsibility for the incident and boasted that they had stolen over eight terabytes of data from Conduent’s systems.
Ongoing Response and Notification Efforts
According to a filing with the U.S. Securities and Exchange Commission, the stolen data involved a significant number of individuals tied to Conduent’s clients. The company is actively notifying affected individuals and aims to complete all alerts by early next year. However, precise timelines and further details have not been made available.
The expansive nature of this breach raises concerns about the security of government contractors that manage critical and sensitive data. Conduent’s breach exemplifies the growing risk of ransomware attacks disrupting public services and compromising personal information at an unprecedented scale.
Given the ongoing investigation, it remains crucial for consumers and agencies to stay vigilant and monitor notifications for potential identity theft or fraud stemming from this breach.
Read more at: techcrunch.com