Conduent Breach Now Tops 25 Million Affected People. What You Can Do to Help Yourself
February 27, 2026
There are some shocking new updates on the sprawling Conduent Business Services data breach that was first reported in October 2025. New reports, which seem to come out daily, show the incident is far larger than initially disclosed. As of writing, state breach notifications and investigative reports now indicate at least 25 million individuals across the United States have had personal information stolen in the ransomware attack originally tied to unauthorized access between October 21, 2024 and January 13, 2025.
The compromised data includes names, addresses, dates of birth, Social Security numbers, health insurance details, and sensitive medical information connected to government benefit programs and private healthcare clients. In many states, the total affected far exceeds earlier estimates — for example, about 15.4 million people in Texas alone and 10.5 million in Oregon as part of the tally.
That range of personal identifiers creates an elevated risk of identity theft, medical fraud, and targeted scams for victims. If your information may have been involved, experts advise doing several things.
Monitor your credit reports. Conduent is offering identity monitoring services with Epic’s Privacy Solutions ID at no charge. If you are offered this, take advantage of it. It’s wise to place a fraud alert or credit freeze. Just remember that these services won’t prevent the fraud. It will inform you that someone is trying to use your information.
- The service also offered Identity Restoration services as well as Dark Web monitoring.
- Watch for unusual activity in financial or health insurance accounts. Look at those benefit statements from your health insurance provider. If anything is odd, call them and resolve it.
- Use strong, unique passwords and multi-factor authentication on all accounts. MFA can be the difference between a full and empty bank account.
- Stay wary of phishing attempts that reference this breach. Don’t click on links or attachments in texts or emails that claim they are related to this breach. Go directly to the account they may be referring to and log in there. Remember they may also call you on the phone and try to get information that way.
SUBSCRIBE TO WEEKLY NEWSLETTER
How To Protect Yourself After A Data Breach
