Conduent Confirms January Cyberattack Exposed Client Data

Conduent, a major U.S. business services provider, disclosed that a cyberattack in January 2025 resulted in the exfiltration of personal data associated with clients’ end-users. The breach, detailed in a recent SEC filing, compromised a limited portion of Conduent’s systems. Although the company reported no material impact on its operations, the breach did disrupt services for some clients, including Wisconsin’s Department of Children and Families, which experienced payment processing issues.

Conduent engaged cybersecurity experts to assess the breach’s scope and confirmed that a significant amount of personal information was stolen. However, there is no indication that the data has been leaked online. The company continues to investigate and is notifying affected clients as required by law. This incident follows a previous ransomware attack on Conduent in 2020, highlighting ongoing cybersecurity challenges for the firm.