<h1>Conduent Ransomware Attack Exposes Data of Millions Across Government and Corporate Clients</h1>
<p>In January 2025, a ransomware attack on Conduent, a major government technology contractor and HR outsourcing provider, has led to a significant data breach affecting millions across the United States. The attack, attributed to the Safeway ransomware gang, has compromised personal information of approximately 25.9 million Americans, spanning multiple states.</p>
<h3>Scope of the Breach</h3>
<p>The breach has notably impacted 15.4 million people in Texas and 10.5 million in Oregon, with exposed data including names, Social Security numbers, medical data, and health insurance information. As Conduent processes data for more than 100 million individuals involved in U.S. government healthcare programs, the full extent of the breach remains undisclosed. The company has not confirmed the total number of affected clients or the potential impact on all serviced programs.</p>
<h3>Corporate Impact</h3>
<p>In addition to the massive breach affecting government data, nearly 17,000 Volvo employees have also had their personal data exposed. As a Conduent HR outsourcing client, Volvo’s employee health plan records, including names and sensitive personal details, were compromised during the breach. This incident marks the second such third-party data exposure for Volvo in recent years.</p>
<h3>Attack Details</h3>
<p>Cybercriminals managed to access Conduent’s systems for nearly three months, from October 2024 until January 2025, before the breach was discovered. The SafePay ransomware group has claimed responsibility for this widespread cyberattack, which reflects a broader pattern of threats impacting both public and private sectors.</p>
<p>Both Volvo and affected government entities are assessing the damage and potential measures to enhance data protection and prevent future breaches in collaboration with Conduent.</p>


Collections

A ransomware attack by the Safeway gang on Conduent, a government technology contractor and HR outsourcing provider, exposed personal data of approximately 25.9 million Americans. The breach affected 15.4 million people in Texas and 10.5 million in Oregon, compromising names, Social Security numbers, medical data, and health insurance information. Nearly 17,000 Volvo employees were also impacted through Conduent's HR services. Attackers maintained access to Conduent's systems for nearly three months (October 2024 to January 2025) before detection.