Conduent, Plaintiffs Reach Preliminary $80M Settlement Over 2024 Hack Affecting 62.2 Million
Summary
Conduent and plaintiffs reached a preliminary $80 million settlement over a 2024 hack affecting 62.2 million people. The proposed agreement includes compensation, monitoring and a commitment to strengthen cybersecurity; Conduent denies wrongdoing.
Key points
- The proposed class-action settlement covers about 62.2 million people affected by the 2024 incident.
- The agreement includes financial compensation, one year of credit or medical data monitoring, and $1 million in identity-theft insurance coverage with no deductible.
- Conduent would also commit to strengthening its cybersecurity; the company denies wrongdoing or liability.
- The settlement divides claimants into two groups based on how accessible their exfiltrated information was to unauthorized third parties: about 40 million in Subclass A and 22 million in Subclass B.
- Court documents say the attack began around Oct. 21, 2024, and continued until approximately Jan. 13, 2025.
- Plaintiffs alleged that the SafePay gang exfiltrated about 8.5 terabytes of data, including names, Social Security numbers, health insurance details and medical information.
Article Details
- Event Type
- Data breach and proposed class-action settlement
- Impact
- The 2024 cyberattack on Conduent affected approximately 62.2 million people. Plaintiffs allege that the SafePay ransomware group exfiltrated approximately 8.5 terabytes of data, including personal, Social Security, health insurance, and medical information. A preliminary $80 million settlement would provide compensation and monitoring services; Conduent denies wrongdoing or liability.