HackingProfessional ServicesGovernmentProfessional ServicesStolen CredentialsDelayed DiscoveryCustomer Data InvolvedIdentity (basic)MediumContained

Conduent State & Local Solutions

bd_ab622a9aa42d9eca · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2025

Filed

Nov 19, 2025

To disclose

44 weeks

Affected

34,423state residents only

Linked

6 filings

Confidence

64%

Full breach record for Conduent State & Local Solutions →4 incidents on file

Conduent State & Local Solutions, Inc. notified South Carolina residents of a cyber incident where an unauthorized third party accessed files associated with the SC Disbursement Unit from Oct 21, 2024, to Jan 13, 2025. Affected data included names and other personal information. Conduent engaged forensic experts, secured networks, and notified law enforcement.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due44 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 84 days

discovery → filing · 44 weeks / 310 days

Oct 21, 2024

Begins

Jan 13, 2025

Discovered

Nov 19, 2025

Filed

vs. sector median

+26 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_0fc3c9f7b21118502025-11-19Verified
Massachusetts State AGbd_479b9aa3bbc91a752025-11-19Verified
Vermont State AGbd_584a64141ba1eb702025-11-19Verified
Maine State AGbd_83a25ec8cabeee272025-11-19Candidate

Show 1 more filing ↓

Nebraska State AGbd_d0c579fe44fc0d5b2025-11-19Verified

Name: Conduent State & Local Solutions
norm: conduent state local

Name: Conduent State & Local Solutions
norm: conduent state local
Industry: Professional ServicesllmGovernmentllm

Discovered: Jan 13, 2025
Breach occurred: Oct 21, 2024 – Jan 13, 2025
Undetected for: 84 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 34,423state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Secured our networks
Initiated an investigation with the assistance of third-party forensic experts
Safely restored our systems and operations
Notified law enforcement
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(310 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.