Conduent proposes $80M settlement over 2024 SafePay ransomware breach affecting 62.2 million individuals
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from October 21, 2024 until January 13, 2025. The SafePay ransomware group claimed to have exfiltrated 8.5 TB of data. Conduent's forensic investigation found that the personal and protected health information of about 62.2 million individuals was stolen. This was the largest healthcare data breach reported in 2025 and the third-largest of all time. The settlement still awaits court approval.
Technical Details
- Dwell time ran from October 21, 2024 to January 13, 2025.
- SafePay claimed 8.5 TB exfiltrated.
- Exposed data: names, addresses, dates of birth, medical information, health insurance information and Social Security numbers.
- The article does not state the initial access vector.
- Settlement structure:
- Subclass A: about 40 million people whose data was stolen but held in complex backup files that are hard to access.
- Subclass B: about 22 million people whose data was stolen in a readily accessible format.
- The lawsuit had 16 causes of action, including negligence and violations of the California Consumer Privacy Act, the California Confidentiality of Medical Information Act and the California Customer Records Act. The defendants deny wrongdoing.
Remediation
- All class members can claim one year of single-bureau credit monitoring, valued at $179.40 per year.
- Class members can claim reimbursement of documented, unreimbursed losses of up to $3,500 each.
- Subclass B members can claim a pro rata cash payment. California residents receive that payment plus 20%.
- Attorneys are seeking 34% of the fund, and class representatives would receive $1,500 each.
- Objection, exclusion and claim deadlines will be set after the court approves the settlement.
Linha do tempo
-
Conduent proposes $80M settlement over 2024 SafePay ransomware breach affecting 62.2 million individuals
ler a análise desta fonte ocultar
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from October 21, 2024 until January 13, 2025. The SafePay ransomware group claimed to have exfiltrated 8.5 TB of data. Conduent's forensic investigation found that the personal and protected health information of about 62.2 million individuals was stolen. This was the largest healthcare data breach reported in 2025 and the third-largest of all time. The settlement still awaits court approval.
Technical Details
- Dwell time ran from October 21, 2024 to January 13, 2025.
- SafePay claimed 8.5 TB exfiltrated.
- Exposed data: names, addresses, dates of birth, medical information, health insurance information and Social Security numbers.
- The article does not state the initial access vector.
- Settlement structure:
- Subclass A: about 40 million people whose data was stolen but held in complex backup files that are hard to access.
- Subclass B: about 22 million people whose data was stolen in a readily accessible format.
- The lawsuit had 16 causes of action, including negligence and violations of the California Consumer Privacy Act, the California Confidentiality of Medical Information Act and the California Customer Records Act. The defendants deny wrongdoing.
Remediation
- All class members can claim one year of single-bureau credit monitoring, valued at $179.40 per year.
- Class members can claim reimbursement of documented, unreimbursed losses of up to $3,500 each.
- Subclass B members can claim a pro rata cash payment. California residents receive that payment plus 20%.
- Attorneys are seeking 34% of the fund, and class representatives would receive $1,500 each.
- Objection, exclusion and claim deadlines will be set after the court approves the settlement.