Conduent agrees to $80M settlement over 2024 SafePay ransomware breach that exposed data of about 62 million people
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 22/10/2026 00:05; os links antigos trazem para cá.
Conduent has agreed to an $80 million settlement of the consolidated class action In Re Conduent Business Services Data Breach Litigation, filed in the U.S. District Court for the District of New Jersey on October 16, 2026 and confirmed in an 8-K filing with the SEC (infosecurity-magazine.com). The suit stems from the 2024 breach at Conduent Business Services, LLC, which the SafePay ransomware group claimed, saying it stole 8.5 TB of data. Conduent's forensic investigation found that the personal and protected health information of about 62.2 million people was stolen (hipaajournal.com). HIPAA Journal ranks it the largest healthcare data breach reported in 2025 and the third largest of all time, behind Change Healthcare (over 192 million people) and Anthem (78.8 million). Conduent denies fault or liability, says its cyber insurance should cover the cost, and has agreed to strengthen its data security practices (infosecurity-magazine.com). The settlement still needs final court approval.
Detalhes técnicos
- An unauthorized party had network access from October 21, 2024 until January 13, 2025 (hipaajournal.com). Conduent did not detect the intrusion for almost three months (infosecurity-magazine.com).
- SafePay claimed to have exfiltrated 8.5 TB. The attribution rests on the group's own claim and is described as alleged (infosecurity-magazine.com). The initial access vector is not stated in the sources (hipaajournal.com).
- Exposed data: names, addresses, dates of birth, Social Security numbers, health insurance information and medical information.
- The settlement splits the class into two subclasses:
- Subclass A: about 40 million people whose data was stolen but held in complex backup files that are not readily accessible.
- Subclass B: about 22 million people whose data was stolen in a readily accessible format.
- The lawsuit had 16 causes of action, including negligence and violations of the California Consumer Privacy Act, the California Confidentiality of Medical Information Act and the California Customer Records Act. The defendants deny wrongdoing (hipaajournal.com).
- Conduent supports about 100 million US residents across government health programs, operates many of the largest US toll systems, and handles government payment disbursements (infosecurity-magazine.com).
Remediação
- All class members can claim one year of single-bureau credit monitoring, valued at $179.40 per year (hipaajournal.com). The fund also covers medical data monitoring and legal fees (infosecurity-magazine.com).
- Class members can claim reimbursement of documented, unreimbursed losses of up to $3,500 each.
- Subclass B members can claim a pro rata cash payment. California residents receive that payment plus 20% (hipaajournal.com).
- Attorneys are seeking 34% of the fund, and class representatives would receive $1,500 each (hipaajournal.com).
- Objection, exclusion and claim deadlines will be set after the court grants approval (hipaajournal.com).
- Conduent has committed to strengthening its data security practices. Affected individuals should use the monitoring offered and watch for identity theft and fraud.
Relatos divergentes
- Number affected: infosecurity-magazine.com reports roughly 62 million people, while hipaajournal.com gives about 62.2 million based on Conduent's forensic investigation. The figures are consistent, and the more precise one is from hipaajournal.com, the later source.
- Cash compensation: infosecurity-magazine.com says only claimants with documented fraud or identity theft losses can receive direct cash reimbursement, capped at $3,500. hipaajournal.com also describes a pro rata cash payment for Subclass B members, with a 20% uplift for California residents. hipaajournal.com is more recent and gives more detail on the settlement structure, so it is likely more complete, but the final terms depend on court approval.
Linha do tempo
-
Conduent proposes $80M settlement over 2024 SafePay ransomware breach affecting 62.2 million individuals
ler a análise desta fonte ocultar
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from October 21, 2024 until January 13, 2025. The SafePay ransomware group claimed to have exfiltrated 8.5 TB of data. Conduent's forensic investigation found that the personal and protected health information of about 62.2 million individuals was stolen. This was the largest healthcare data breach reported in 2025 and the third-largest of all time. The settlement still awaits court approval.
Technical Details
- Dwell time ran from October 21, 2024 to January 13, 2025.
- SafePay claimed 8.5 TB exfiltrated.
- Exposed data: names, addresses, dates of birth, medical information, health insurance information and Social Security numbers.
- The article does not state the initial access vector.
- Settlement structure:
- Subclass A: about 40 million people whose data was stolen but held in complex backup files that are hard to access.
- Subclass B: about 22 million people whose data was stolen in a readily accessible format.
- The lawsuit had 16 causes of action, including negligence and violations of the California Consumer Privacy Act, the California Confidentiality of Medical Information Act and the California Customer Records Act. The defendants deny wrongdoing.
Remediation
- All class members can claim one year of single-bureau credit monitoring, valued at $179.40 per year.
- Class members can claim reimbursement of documented, unreimbursed losses of up to $3,500 each.
- Subclass B members can claim a pro rata cash payment. California residents receive that payment plus 20%.
- Attorneys are seeking 34% of the fund, and class representatives would receive $1,500 each.
- Objection, exclusion and claim deadlines will be set after the court approves the settlement.
-
Conduent agrees to $80m settlement over 2024 SafePay-linked breach exposing data of about 62 million people
ler a análise desta fonte ocultar
Conduent has agreed to pay $80m to settle a class action over the October 2024 cyber incident that exposed personal and health data of roughly 62 million people. The filing was submitted to the US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the SEC. The attack was allegedly carried out by the SafePay ransomware gang, which claimed to have stolen 8.5TB of data. Conduent denies fault or liability, says its cyber insurance should cover the cost, and has agreed to strengthen its data security practices. HIPAA Journal ranks the incident as the third largest healthcare data breach of all time, behind Change Healthcare (over 192 million people) and Anthem (78.8 million).
Technical Details
- The intrusion took place in October 2024 but went undetected by Conduent for almost three months.
- An unauthorized actor exfiltrated data that may include names, addresses, dates of birth, Social Security numbers, health insurance details and medical information.
- The settlement splits claimants into two subclasses: about 40 million people whose data sat in complex backup files that were not readily accessible, and about 22 million whose data was in readily accessible files.
- Only claimants with documented fraud or identity theft losses can receive direct cash reimbursement, capped at $3,500. The fund also covers credit and medical data monitoring and legal fees.
- Conduent supports about 100 million US residents across government health programs, operates many of the largest US toll systems, and handles government payment disbursements.
Remediation
- Conduent has committed to strengthening its data security practices as part of the settlement, which still needs final court approval.
- Affected individuals should use the offered credit and medical data monitoring and watch for identity theft and fraud.