The relevant data breach is growing, affecting at least 25M people

An explosion from a ransomware attack on one of the largest government contractors in the United States it’s getting bigger: More than 25 million people have now had their information stolen in a hack.

Conduent provides printing, mailing, and document processing and payment services for federal government benefits, such as food assistance, as well as workplace and unemployment benefits for large corporations. Therefore, the company manages the personal information contained in the largest collection of the United States. Enough he says its technology and support services reach over 100 million people.

But since the January 2025 cyberattack, which the ransom group claimed, the corporate giant has not said much about the data breach, such as when it started and how many people were affected.

Change of Wisconsin data breach notification page now shows the Conduent breach affects at least 25 million people across the United States.

The count that TechCrunch continues from the various data breach notifications we’ve seen reaches about 25 million people, with Oregon (10.5 million) and Texas (15.4 million) accounting for the majority of those affected. Other data breach notices seen by TechCrunch include thousands more in Massachusetts, New Hampshire and Washington.

The breach is known to have compromised people’s names, dates of birth, addresses, Social Security numbers, health insurance information, and medical data.

Conduent has said little outside of data breach notifications, and in some cases has made it difficult for affected parties to find out about the breach.

A page on Conduent’s website, titled “Event Notice” which was published in October 2025 at the same time as his first notice of a data breach, does not mention cyber security. The site has a hidden “noindex” tag in its code, which tells search engines not to index the site in search results, making it difficult for anyone searching the web to find it.

When reached by TechCrunch, Conduent spokesman Sean Collins did not say how many notifications the company has sent so far, or why the company is hiding its information from search engines.

Conduent’s breach has been described as one of the “biggest,” but it likely follows Change Healthcare’s move, itself. affected more than 190 million people following a ransomware attack in February 2024. A Russian-speaking ransomware group stole health and medical information from Change Healthcare using a. history has been stolen which was not protected by the authentication of many products, which caused the medical professional to pay two ransoms to save information has been stolen without internet.