DisclosureLens
HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

CONDUENT BUSINESS SERVICES, LLC

bd_66289560b67ffec5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2025

Filed

Oct 24, 2025

To disclose

41 weeks

Affected

Not disclosed

Linked

37 filings

Confidence

65%
Full breach record for CONDUENT BUSINESS SERVICES, LLC5 incidents on file

Conduent Business Services, LLC reported a cyber incident discovered on January 13, 2025, involving unauthorized access to its network from October 21, 2024, to January 13, 2025. An unauthorized third party obtained files associated with Conduent's clients, containing personal information such as names and government identifiers (e.g., Social Security numbers). Conduent secured its networks, engaged forensic experts, notified law enforcement, and is offering 12 months of credit monitoring and identity restoration services to affected individuals.

Incident timeline

undetected · 84 days
discovery → filing · 41 weeks / 284 days

Oct 21, 2024

Begins

Jan 13, 2025

Discovered

Oct 24, 2025

Filed

vs. sector median

+22 wks slower

This filing is one of 37 about the same incident.View merged incident
Part of CONDUENT BUSINESS SERVICES, LLC supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 185d gap

Showing first 10 of 36 linked disclosures.

Filing propagation · 11 filings · 5 states

View merged incident ↗

Pattern: first filing Oct 24 (DE), last Apr 27 (CA) — a 185-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 36 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.