A US$80 million settlement has been proposed to resolve the consolidated class action against Conduent Business Services over its 2024 breach, in which an unauthorised third party held access from 21 October 2024 to 13 January 2025 and the SafePay ransomware group claimed to have exfiltrated 8.5 terabytes. Conduent's forensics put the toll at roughly 62.2 million people — names, addresses, dates of birth, medical and health-insurance information and Social Security numbers — the largest healthcare data breach reported in 2025 and the third-largest of all time. Filed in the US District Court for the District of New Jersey after mediation, the deal splits claimants into Subclass A (about 40 million, whose data sat in complex backups) and Subclass B (about 22 million, in readily accessible form). Members get one year of single-bureau credit monitoring valued at US$179.40 and up to US$3,500 in documented losses, with Subclass B also eligible for a pro-rata payment; counsel seek 34% of the fund. Court approval is still pending.

• Source article