MisuseFinancial ServicesFinancePrivilege AbuseData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsMediumContained

CONDUENT INCORPORATED

bd_de94237e28e5311f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 6, 2020

Filed

Jan 19, 2021

To disclose

15 weeks

Affected

1state residents only

Confidence

66%

Full breach record for CONDUENT INCORPORATED →8 incidents on file

Conduent, Inc. disclosed a security breach involving one New Hampshire resident. An internal employee used valid credentials to make unauthorized changes to email and bank account details, resulting in fraudulent withdrawals. The incident occurred between May 7, 2019, and October 28, 2020, and was discovered on October 6, 2020. Conduent notified the NH Attorney General on January 19, 2021, and affected individuals on November 25, 2020. Data exposed included names, emails, banking info, HSA numbers, and partial SSNs. Conduent terminated the employee, froze accounts, restored funds, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 518 days

discovery → filing · 15 weeks / 105 days

May 7, 2019

Begins

Oct 6, 2020

Discovered

Jan 19, 2021

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: CONDUENT INCORPORATED
norm: conduent
Domain: conduent.com

Name: CONDUENT INCORPORATED
norm: conduent
Domain: conduent.com
Industry: Financial Servicesllm

Discovered: Oct 6, 2020
Breach occurred: May 7, 2019 – Oct 28, 2020
Undetected for: 518 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 25, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: insider_action

During the incident: Activated corporate security investigations team
Involved legal, business operations, human resources, privacy, and computer security investigation response groups
Removed individual from employment
Removed access from all applications, systems, and premises
Contacted banking authorities
Consulted with legal to seek remedies
Frozen affected accounts
Issued a new account number and a replacement HSA debit card
Restored the fraudulent withdrawals to your new account
Offered to provide one year of free credit monitoring for impacted customers
Changes made: Taken steps to increase quality assurance and monitoring of employee activities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/conduent-20210119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2021
Raw hash: 24d911ae3a49ade024553d2bedf7986f700058d8c5a5f8fa36fe38ed04ba6e46

Reporting entityCONDUENT INCORPORATED

Victim entityCONDUENT INCORPORATED

Incidentdiscovered Oct 6, 2020

Stated responseActivated corporate security investigations team

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov