A proposed US$80 million settlement would resolve the consolidated class action against Conduent Business Services LLC, Conduent State & Local Solutions Inc and Conduent Incorporated over a 2024 breach in which an unauthorised party first entered the network on 21 October 2024 and maintained access until 13 January 2025, with the SafePay ransomware group claiming 8.5 terabytes of data exfiltrated. Conduent's forensic investigation determined the personal and protected health information of approximately 62.2 million individuals was stolen — names, addresses, dates of birth, medical and health-insurance information and Social Security numbers — the largest healthcare data breach reported in 2025 and the third-largest of all time. Filed in the US District Court for the District of New Jersey after mediation, the deal splits the class into Subclass A (~40 million, data held in complex backup files) and Subclass B (~22 million, readily accessible data); all class members may claim a year of single-bureau credit monitoring (valued at $179.40) and up to $3,500 in documented losses, while Subclass B members and California residents are also eligible for pro rata cash payments. Attorneys are seeking 34 per cent of the fund.

• Source article