Conduent $80M settlement — 62.2M-record healthcare data breach class action
Severity: high · Patch status: no-fix-needed · Since 2026-10-27
Business services provider Conduent has agreed to pay $80 million to settle class action litigation over what is reported as the third-largest healthcare data breach on record, exposing data on approximately 62.2 million people. The settlement was signed on October 16, 2026, with plaintiffs in the U.S. District Court for the District of New Jersey. The sources do not state the breach date, attack vector, or threat actor. Affected individuals face elevated risk of identity theft and fraud; the settlement provides compensation to class members. No vendor patch applies; remediation is legal and operational rather than technical.
What to do
- If you or your organisation may be a class member, check settlement claim deadlines and file claims
- Monitor for identity theft and fraud; consider credit freezes or monitoring for affected individuals
- Review vendor risk posture for business-process outsourcers handling healthcare data
- Ensure breach-notification and downstream-contract obligations with Conduent-like vendors are current
Sources
All live incidents on Threat Watch
