Wisconsin Reveals Conduent Breach Affected 25 Million Americans

A data breach at Conduent Business Services, an operator of back-end systems for state governments, has affected more than 25 million people across the country, according to data breach information posted this month by the Wisconsin Department of Agriculture, Trade and Consumer Protection (DATCP).

Conduent’s systems handle Medicaid claims and eligibility systems to support child support payments, food assistance and unemployment insurance, according to the post.

The incident affected the company’s clients across the U.S., and the data accessed in the breach includes, but is not limited to, names, addresses, dates of birth, Social Security numbers, health insurance details and health information, the post said.

The data breach occurred between Oct. 21, 2024, and Jan. 13, 2025, and the public was notified on Jan. 22, 2025, per the post.

Conduent said in a notice of data incident on its website: “On January 13, 2025, we discovered that we were the victim of a cyber incident that impacted a limited portion of our network. Upon discovery, we immediately secured our networks and initiated an investigation with the assistance of third-party forensic experts.”

The Texas Office of the Attorney General (OAG) published a data security breach report Feb. 2 saying that about 15.5 million Texans were affected by the incident.

Texas Attorney General Ken Paxton said in a Feb. 12 press release that he issued civil investigative demands to Conduent and Blue Cross Blue Shield of Texas, demanding documents and information about the breach.

Blue Cross Blue Shield of Texas is one of several entities affected by the Conduent data breach, and Paxton is investigating its compliance with state law, according to the release. He is also investigating Conduent’s compliance with Texas law.

“The Conduent data breach was likely the largest breach in U.S. history,” Paxton said in the release. He added later in the release: “Texans deserve to know that their private health information is being handled responsibly and in full compliance with the law. My office is committed to uncovering exactly what went wrong, taking action to protect Texas families, and ensuring there is justice for any negligence.”

Blue Cross Blue Shield of Texas said in an October 2025 update on the Conduent cyber incident that Conduent is one of its services providers, delivering mailroom, payment and other back-office support services.

“Because of our relationship with Conduent, BCBSTX members were impacted by the incident,” the firm said in its update.