Hackers were inside the network of Conduent, a contractor that handles records for state Medicaid, unemployment and child support programs and for health insurers such as Humana, from October 21, 2024, until January 13, 2025. They took names, addresses, dates of birth, Social Security numbers, health insurance details and medical information belonging to about 62.2 million people. The SafePay ransomware group claimed to have stolen 8.5 terabytes of data.
On October 16, 2026, Conduent disclosed that it had agreed to pay $80 million into a non-reversionary fund to settle the consolidated class action against it in federal court in New Jersey. The settlement still needs the court's approval. Conduent denies liability and said the deal is not an admission of fault.
Under the proposed terms, about 40 million people whose data sat in hard-to-access backup files would get a year of credit monitoring, and about 22 million whose data was readily accessible would get a year of medical data monitoring and could claim a share of the remaining cash. Any class member could also claim up to $3,500 for documented, unreimbursed losses.
Comments
Did this happen to you too? Share what you know: dates, amounts, names used, websites and wallet addresses.