Business services provider Conduent’s data breach affected at least 25 million people across the U.S., according to a February update from Wisconsin’s Department of Agriculture, Trade and Consumer Protection.
The Conduent breach took place between the end of 2024 and the beginning of 2025. The breach revealed names, Social Security numbers, insurance information and medical data.
For reference, 2024’s Change Healthcare cyberattack exposed the data of 190 million people, making it the largest healthcare breach in history. Over a decade ago, hackers accessed data from about 80 million past and current Anthem customers and employees.
BCBS Montana, BCBS Texas, BCBS Illinois and BCBS New Mexico — all owned by Health Care Service Corp. — along with Humana and Premera Blue Cross, were impacted by the Conduent incident. Montana and Texas have been investigating their respective insurers over the breach.
Wisconsin’s notice did not include how many state residents were affected, but Texas identified about 15.5 million individuals impacted in the state.
“From the outset of this incident, we acted promptly and in alignment with incident‑response protocols to contain and investigate the issue,” Conduent said in a statement shared with Becker’s. “To date, there is no evidence that any underlying data has been misused, posted or made publicly available, and we continue to monitor closely.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.