HackingProfessional ServicesHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedBusiness Associate (HIPAA)Delayed DiscoveryPIIPHILowResolved
CONDUENT BUSINESS SERVICES, LLC
bd_22414037e01075c4 · schema v1 · pii pii-v1
Full breach record for CONDUENT BUSINESS SERVICES, LLC →Conduent Business Services LLC, a back-office services provider to health plans, suffered an unauthorized network intrusion from Oct 21, 2024 to Jan 13, 2025. An external actor accessed a limited network portion and exfiltrated files containing health plan member PII/PHI. 3 Maine residents among 16,991 total affected. Systems restored; law enforcement notified. Epiq identity monitoring offered.
Maine clockDiscovered Jan 13, 2025 → Filed with AG Feb 9, 2026392d ✗ ME AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5f8e9d3f-dfdb-4be0-8826-d7fe9d27a328.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2026
- Raw hash
- 7aba5a5c7003431cfd7b7171d97caff3a6a9826ab065c0857de62e1b8de3c4bb
Reporting entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
Victim entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
- Industry
- Professional ServicesllmHealthcarellm
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Jan 28, 2026
- Affected individuals
- 3
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 13 months(392 days from discovery to filing)
- Compliance flags
- ME AG >90d · 392dME resident >180d · 380d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2025→ Filed with AG: Feb 9, 2026392d 90 days ME AG >90d Maine Discovered: Jan 13, 2025→ Notified: Jan 28, 2026380d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.