CONDUENT BUSINESS SERVICES, LLC

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on April 27, 2026, regarding a prior security incident. The filing discloses that notifications were sent to 4 additional New Hampshire residents. The affected data included names and Social Security numbers. The incident involves one or more covered entities for which Conduent acts as a service provider.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services, LLC filed a supplemental security incident notice with the New Hampshire Attorney General on March 24, 2026. The filing reports that notifications were sent to an additional 112,325 New Hampshire residents regarding a data security incident involving names and Social Security numbers. Conduent acts on behalf of covered entities/data owners and continues to provide notices.

Conduent Business Services, LLC notified Vermont consumers of a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The breach exposed names and government identifiers (SSN, DOB, driver's license). Conduent engaged forensic experts, secured systems, notified law enforcement, and offered 24 months of credit monitoring.

Conduent Business Services LLC, a back-office services provider to health plans, suffered an unauthorized network intrusion from Oct 21, 2024 to Jan 13, 2025. An external actor accessed a limited network portion and exfiltrated files containing health plan member PII/PHI. 3 Maine residents among 16,991 total affected. Systems restored; law enforcement notified. Epiq identity monitoring offered.

Conduent Business Services, LLC notified Vermont residents of a cyber incident discovered Jan 13, 2025, involving unauthorized access from Oct 21, 2024, to Jan 13, 2025. The incident affected files containing personal information (name, SSN, DOB, etc.) of individuals associated with health plans served by Conduent. Conduent engaged forensic experts, secured systems, notified law enforcement, and offered credit monitoring services.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on February 2, 2026, regarding a security incident. The filing reports that Conduent began notifying an additional 112,952 New Hampshire residents on behalf of covered entities. The affected personal information included names and Social Security numbers. This is a follow-up to a previous supplemental notice dated January 2, 2026.

Conduent Business Services, LLC notified Vermont residents of a cyber incident discovered on January 13, 2025. An unauthorized third party accessed Conduent's environment from October 21, 2024, to January 13, 2025, obtaining files containing personal information including names and government identifiers. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. Affected individuals are offered 24 months of credit monitoring and identity restoration services.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services LLC, a third-party BPO/mailroom services provider, discovered Jan 13 2025 that an unauthorized actor accessed its network Oct 21 2024–Jan 13 2025, obtaining files tied to health plan members. 5,875 individuals affected (2 Maine residents). Systems restored; law enforcement notified; 12-month Epiq identity monitoring offered.

Conduent Business Services, LLC, a third-party service provider for Continental Casualty Company, disclosed a cyber incident affecting data of health plan members. Unauthorized access occurred from Oct 21, 2024, to Jan 13, 2025. Affected data included names and government identifiers. Conduent engaged forensic experts, secured systems, and offered credit monitoring.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on January 2, 2026, regarding a data security incident. The breach affected 12,666 New Hampshire residents, exposing names and Social Security numbers. Conduent, acting on behalf of covered entities/clients, is providing notifications to affected individuals. This is a follow-up to previous notifications sent in October, November, and December.

Conduent Business Services, LLC notified consumers of a data breach where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The incident exposed personal information including names and government identifiers (e.g., SSN) for a limited number of individuals. Conduent engaged forensic experts, secured its network, and notified law enforcement.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services, LLC filed a supplemental security incident notice with the New Hampshire Attorney General on December 18, 2025. The filing reports that Conduent began notifying an additional 44,010 New Hampshire residents regarding a data security incident. The affected personal information includes names and Social Security numbers. Conduent acts on behalf of covered entities and continues to provide notices to affected individuals.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on November 19, 2025, regarding 915 additional NH residents affected by a cyber incident. Unauthorized access occurred from October 21, 2024, to January 13, 2025. Affected data included names and Social Security numbers. Conduent engaged forensic experts, secured networks, and notified law enforcement.

Conduent Business Services, LLC disclosed a cyber incident where an unauthorized third party accessed its network from October 21, 2024, to January 13, 2025. The attacker obtained files containing personal information, including names, of clients served by Conduent. Conduent secured its networks, engaged forensic experts, restored systems, and notified law enforcement. No evidence of misuse was found.

Conduent Business Services, LLC notified South Carolina residents of a cyber incident discovered on January 13, 2025. An unauthorized third party accessed the network from October 21, 2024, to January 13, 2025, obtaining files containing client personal information. Conduent restored systems, engaged forensic experts, and notified law enforcement.

Conduent Business Services, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2025-10-24. The breach occurred during 10/21/2024. The breach was discovered on 1/13/2025. 10,515,849 individuals were affected. Notice was sent on 10/8/202510/24/2025.

Conduent Business Services, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-21 and was reported on 2025-10-24. 5,892 Indiana residents were affected.

Conduent Business Services LLC, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2025-01-13 and filed notice on 2025-10-24. 786,927 Washington residents were affected. 284 days elapsed between awareness and notification. 84 days to identify the breach. 0 days to contain the breach.

Conduent Business Services, LLC reported a cyber incident discovered on January 13, 2025, involving unauthorized access to its network from October 21, 2024, to January 13, 2025. An unauthorized third party obtained files associated with Conduent's clients, containing personal information such as names and government identifiers (e.g., Social Security numbers). Conduent secured its networks, engaged forensic experts, notified law enforcement, and is offering 12 months of credit monitoring and identity restoration services to affected individuals.

Conduent Business Services, LLC reported an external system breach (hacking) to the Maine Attorney General. The incident occurred between October 21, 2024, and January 13, 2025, and was discovered on January 13, 2025. The breach affected 374 Maine residents. The specific data acquired was not explicitly detailed in the summary, but the filing indicates personal identifiers were involved. Written notification was sent to affected individuals on October 24, 2025.