Government contractor Conduent disclosed a data breach

The business services provider Conduent told the SEC a January cyberattack exposed personal data, including names and Social Security numbers.

The business services provider Conduent revealed that personal information, including names and Social Security numbers, was stolen in a January cyberattack.

In January, Conduent confirmed a cyberattack caused service disruptions after agencies in multiple US states reported outages. Wisconsin and Oklahoma noted impacts on payments and customer support.

In a new FORM-8K filing with the SEC, the company announced that it had restored operations quickly after a cyberattack, but confirmed that attackers stole files containing personal data from some clients’ end-users.

“On January 13, 2025, Conduent Incorporated (the “Company”) experienced an operational disruption and learned that a ‘threat actor’ gained unauthorized access to a limited portion of the Company’s environment.” reads the FORM-8K filed with SEC. “As part of its ongoing investigation, the Company determined that the threat actor exfiltrated a set of files associated with a limited number of the Company’s clients. Due to the complexity of the files, the Company engaged cybersecurity data mining experts to evaluate the exfiltrated data and was recently informed of its nature, scope and validity, confirming that the data sets contained a significant number of individuals’ personal information associated with our clients’ end-users.”

The business services provider is still investigating the data exfiltration’s full impact and notifying clients as needed. So far, the stolen data hasn’t appeared on the dark web or publicly released.

Conduent reported no major operational impact from the cyberattack but did face significant one-time costs for notifications. The company holds cyber insurance and informed federal authorities.

The company did not disclose technical details about the attack, but experts believe it was the victim of a ransomware attack.

Conduent suffered another security breach in 2020 by the Maze ransomware gang, which stole corporate data.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, data breach)