CONDUENT Inc
Apr 2025 · Graded Verified · Professional and Business Services · Government record
CONDUENT IncApr 2025
A threat actor sat inside Conduent's environment for nearly three months, from October 2024 until a January 2025 disruption gave it away, long enough to take what SafePay claims was roughly 8 terabytes. Conduent is the back office that governments and health plans outsource to, so one intrusion became a front door to their end-users, a count that has climbed from 10 million toward 60 million as the forensics catch up. When the processor is the perimeter, its dwell time becomes everyone's.
SEC 8-K, Item 1.05
Initial attack type not disclosed · Impact data theft confirmed + operational outage · Actor SafePay
Quantified 23 days after disclosure.
Losses on the record
$25M
Direct expense
VVerifiedVerified: the linked document states this figure.
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The loss on the record is this same figure, typed and categorized.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.