Additional Coverage:
- Data breach that went unnoticed in October 2024 may have left millions of Americans vulnerable (marketrealist.com)
Millions of Americans’ Data Exposed in Massive Breach, Texas Hardest Hit
Americans are already grappling with economic pressures, and now, a major data breach has added another layer of concern for millions across the nation. Sensitive personal information, including Social Security numbers and health insurance details, may have been exposed, leaving many vulnerable. Texas appears to be particularly impacted, with reports suggesting that nearly half of its residents could be affected.
The breach originated at Conduent, a company that manages backend systems for state governments, when its systems were infiltrated by the SafePay ransomware group in October 2024. Shockingly, this security lapse went undetected for three months, only coming to light on January 13, 2025. During this critical period, the SafePay group claims to have siphoned approximately 8.5 terabytes of data from Conduent’s systems.
In February 2025, the ransomware group listed Conduent on its dark web leak site, threatening to publish the stolen data if a ransom was not paid. As of now, there are no confirmed reports of Conduent engaging with the group.
The repercussions are widespread, with Texas initially estimating 4 million affected individuals, a figure that has since surged to a staggering 15.4 million-a 285% increase. Other states are also facing significant exposure, with Oregon reporting an estimated 10.5 million potentially affected. Hundreds of thousands of individuals in Delaware, Massachusetts, and New Hampshire are also among the victims.
In response to the breach, a series of class-action lawsuits have been consolidated in federal court in New Jersey, alleging that Conduent failed to adequately protect personal data. The company’s apparent oversight, remaining unaware of the data theft for three months, could lead to substantial damages, regulatory penalties, and strained relationships with its state government clients.
Conduent plays a crucial role in supporting government healthcare programs in 46 states, serving approximately 120 million people. Its responsibilities include processing over 500 million Medicaid claims annually and disbursing billions of dollars each year for various programs, including Medicaid claims, eligibility systems, child support payments, food assistance, and unemployment insurance.
Despite the SafePay ransomware group’s claims of listing Conduent on its dark web leak site, Conduent has stated otherwise. “Both Conduent and our third-party experts monitor the dark web regularly and have no evidence of any personal information being released on the dark web,” the company asserted in a statement.