HackingProfessional ServicesFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
CONDUENT BUSINESS SERVICES, LLC
bd_f852b69bb9ec919a · schema v1 · pii pii-v1
Full breach record for CONDUENT BUSINESS SERVICES, LLC →Conduent Business Services LLC, a third-party BPO/mailroom services provider, discovered Jan 13 2025 that an unauthorized actor accessed its network Oct 21 2024–Jan 13 2025, obtaining files tied to health plan members. 5,875 individuals affected (2 Maine residents). Systems restored; law enforcement notified; 12-month Epiq identity monitoring offered.
Maine clockDiscovered Jan 13, 2025 → Filed with AG Jan 30, 2026382d ✗ ME AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 17 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_762d2e946d0bac71California State AGfiled 2026-01-30Verified by operator
- bd_1aa1d6e9864b9f11California State AGfiled 2026-01-02(28d gap)Verified by operator
- bd_1dc7924790d25e00California State AGfiled 2025-12-18(43d gap)Verified by operator
- bd_f0f8f4ea37f95aeaCalifornia State AGfiled 2025-11-19(72d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 98d gap
- bd_9a01d38f939aaafdCalifornia State AGfiled 2025-10-31(91d gap)Verified
- bd_da80bf2198e3b33cSouth Carolina State AGfiled 2025-10-25(97d gap)Verified
- bd_0162931e2547ac82Oregon State AGfiled 2025-10-24(98d gap)Verified by operator
- bd_0c1a1b81dfed8e43Washington State AGfiled 2025-10-24(98d gap)Verified by operator
- bd_808c801f25278a52Maine State AGfiled 2025-10-24(98d gap)Verified by operator
- bd_a106c26995e2ff3cCalifornia State AGfiled 2025-10-24(98d gap)Verified
Showing first 10 of 16 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/110244e7-ebaf-40ed-bf1c-1323ca1bea2d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2026
- Raw hash
- caf80c6542e58acefc3f7731ef12ea702b6238c6d50122c813a6542dca022e8a
Reporting entity
- Name
- Continental Casualty Company and its affiliates (CNA)norm: continental casualty company and its affiliates cna
- Domain
- cna.com
- Industry
- Financial Services
Victim entity
- Name
- CONDUENT BUSINESS SERVICES, LLCnorm: conduent business
- Domain
- conduent.com
- Industry
- Financial Services
- Industry
- Professional ServicesllmFinancial Servicesllm
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 2
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 13 months(382 days from discovery to filing)
- Compliance flags
- ME AG >90d · 382d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2025→ Filed with AG: Jan 30, 2026382d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.