HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CONDUENT BUSINESS SERVICES, LLC
bd_972d61c63095353e · schema v1 · pii pii-v1
Full breach record for CONDUENT BUSINESS SERVICES, LLC →Conduent Business Services, LLC, a third-party service provider for Continental Casualty Company, disclosed a cyber incident affecting data of health plan members. Unauthorized access occurred from Oct 21, 2024, to Jan 13, 2025. Affected data included names and government identifiers. Conduent engaged forensic experts, secured systems, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_a6caa75fc8d4461cNew Hampshire State AGfiled 2026-02-02(5d gap)Candidate
- bd_ece9dad957fe9782Vermont State AGfiled 2026-02-02(5d gap)Candidate
- bd_b53c868a573bb639Vermont State AGfiled 2026-02-05(8d gap)Candidate
- bd_99d0d766a7884243New Hampshire State AGfiled 2026-01-02(26d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 89d gap
- bd_bdc63ed4d2637102Vermont State AGfiled 2026-01-02(26d gap)Candidate
- bd_575cdccf6d11a6d6New Hampshire State AGfiled 2025-12-18(41d gap)Candidate
- bd_3af322b73c7f0ee5New Hampshire State AGfiled 2026-03-24(55d gap)Verified
- bd_bd09f131aeddef8dVermont State AGfiled 2026-03-24(55d gap)Verified
- bd_81c152f95b588701New Hampshire State AGfiled 2026-04-27(89d gap)Verified
- bd_ee9a5338c14e0e99California State AGfiled 2026-04-27(89d gap)Candidate
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-28-continental-casualty-company-and-its-affiliates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2026
- Raw hash
- 448ac1ef8ee741e326e7e07d2cf10b9ddd01127a8d0afaa161201e471946a46d
Reporting entity
- Name
- Continental Casualty Company and its affiliates (CNA)norm: continental casualty company and its affiliates cna
- Domain
- cna.com
Victim entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- Jan 28, 2026
- Notification sent
- Jan 28, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Third party
- via Conduent Business Services, LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 13 months(380 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.