HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CONDUENT BUSINESS SERVICES, LLC
bd_b8a8f61c4f0c2bb5 · schema v1 · pii pii-v1
Full breach record for CONDUENT BUSINESS SERVICES, LLC →Conduent Business Services, LLC notified Vermont residents of a data breach where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The incident exposed names and government identifiers (e.g., SSN, DOB) of affected individuals. Conduent engaged forensic experts, secured systems, and notified law enforcement. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 17 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_0162931e2547ac82Oregon State AGfiled 2025-10-24Verified by operator
- bd_0c1a1b81dfed8e43Washington State AGfiled 2025-10-24Verified by operator
- bd_808c801f25278a52Maine State AGfiled 2025-10-24Verified by operator
- bd_da80bf2198e3b33cSouth Carolina State AGfiled 2025-10-25(1d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 98d gap
- bd_9a01d38f939aaafdCalifornia State AGfiled 2025-10-31(7d gap)Verified
- bd_f0f8f4ea37f95aeaCalifornia State AGfiled 2025-11-19(26d gap)Verified
- bd_1dc7924790d25e00California State AGfiled 2025-12-18(55d gap)Verified by operator
- bd_1aa1d6e9864b9f11California State AGfiled 2026-01-02(70d gap)Verified by operator
- bd_762d2e946d0bac71California State AGfiled 2026-01-30(98d gap)Verified by operator
- bd_f852b69bb9ec919aMaine State AGfiled 2026-01-30(98d gap)Verified by operator
Showing first 10 of 16 linked disclosures.
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-24-conduent-business-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2025
- Raw hash
- 2e8052b7bb7f483de86705843aa49a5e7e7e23a4519efd2911e797171d5e3f30
Reporting entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
Victim entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 41 weeks(284 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.