Published
March 28, 2026
If you had Blue Cross Blue Shield or another major insurer, your name, SSN, and health data may be among the 10.5 million records exposed in the Conduent breach — here is where the litigation stands.
It took Conduent nearly 10 months to notify most of those people. Letters postmarked October 24, 2025 did not reach some consumers until late January 2026. By then, more than 35 class action lawsuits had been filed.
There is no settlement. There is no claim form. There is no money available. But this is shaping up to be one of the largest healthcare data breach cases in U.S. history, and if you had health insurance through Blue Cross Blue Shield or another major insurer, you may have been affected.
What Is Conduent and Why Does This Matter?
Conduent Business Services is a New Jersey-based company that provides mailroom, payment processing, and back-office support services for health care agencies and insurers. It was spun off from Xerox in 2017 and handles data for more than 100 million Americans. Its clients include several major Blue Cross Blue Shield entities, Premera Blue Cross, and other insurance companies. Conduent reported $3.4 billion in revenue in 2024.When Conduent was breached, it was not just one insurance company's data at risk -- it was the data of millions of customers across multiple insurers nationwide. The Texas Attorney General called it "likely the largest breach in U.S. history." Court filings rank it as at least the eighth-largest healthcare data breach ever recorded.
What Data Was Stolen?
The breach exposed some combination of names, addresses, dates of birth, Social Security numbers, email addresses, telephone numbers, and clinical health information. The specific data involved varies by person, but the inclusion of both Social Security numbers and health records makes this breach especially dangerous -- it creates risks of both financial identity theft and medical identity fraud.Who Was Affected?
Over 10.5 million health insurance customers nationwide were affected. Blue Cross Blue Shield customers are among the most heavily impacted, given the size of BCBS's market share. In Texas alone, an estimated 4 million people were affected -- BCBS holds over 26% of the health insurance market in that state.If you received a letter from Conduent Business Services about this breach, you are affected. If you had health insurance through a company that used Conduent for back-office services during the breach period (October 2024 through January 2025), your data may have been compromised even if you have not yet received a notification.
Where Do the Lawsuits Stand?
More than 35 class action lawsuits have been filed against Conduent in the U.S. District Court for the District of New Jersey. All cases have been consolidated under Judge Michael A. Hammer. On December 22, 2025, the court appointed an eight-member Plaintiffs' Steering Committee to coordinate the litigation.The latest amended complaint bringing 35 individual suits under a single petition was filed on March 18, 2026. Conduent, Health Care Service Corporation (Blue Cross Blue Shield), and AIG Procurement Services all have until April 20, 2026 to respond. Plaintiffs must respond to any motions to dismiss by May 20.
The lawsuits allege Conduent failed to implement adequate cybersecurity safeguards, failed to comply with HIPAA, and took nearly 10 months to notify affected individuals after the breach was discovered. Claims include negligence, breach of contract, violations of the FTC Act, and violations of state consumer protection laws.
How Long Will This Take?
Class action lawsuits of this size typically take years to resolve. Right now, the defendants have not even responded to the consolidated complaint. It could be another three months before a judge decides whether the case can proceed past motions to dismiss. Settlement discussions may or may not be underway behind the scenes, but nothing will be public until an agreement is nearly finalized.For context, Conduent has already spent $9 million on breach notification costs and expects another $16 million in costs by the first quarter of 2026. The company holds a cyber insurance policy but acknowledges that litigation costs, regulatory fines, and reputational damage could significantly impact its financial position.
What Should You Do Right Now?
If you received a notification letter from Conduent, hold onto it. Monitor your credit reports for suspicious activity. Consider placing a fraud alert or credit freeze with all three major credit bureaus.Conduent offered affected individuals two years of free credit monitoring and identity restoration services. The enrollment deadline was March 31, 2026. According to available information, accepting the free credit monitoring does not waive your right to participate in a future class action settlement.
There is no claim form available and no settlement to file for right now. When a settlement is reached, a dedicated website will be created, emails and letters will be sent to affected consumers, and a claim form will become available with a deadline. OpenClassActions.com will publish a full settlement page when that happens.
Be cautious about any website or ad claiming you can already file a Conduent data breach claim for money. No legitimate claims process exists at this time.
Case Information
Case: In re: Conduent Business Services Data Breach Litigation (consolidated)
Court: U.S. District Court, District of New Jersey
Judge: Hon. Michael A. Hammer
Defendant: Conduent Business Services LLC
Also Named: Health Care Service Corporation (BCBS), AIG Procurement Services
Breach Period: October 21, 2024 through January 13, 2025
Data Exposed: Names, addresses, DOB, SSN, email, phone, clinical health info
People Affected: Over 10.5 million
Lawsuits Filed: 35+ (consolidated)
Steering Committee: Appointed December 22, 2025
Defendants' Response Due: April 20, 2026
Settlement: None -- early-stage litigation
Claim Form: None -- does not exist
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
About This Article
This is an active, early-stage consolidated class action lawsuit. There is no settlement, no claim form, and no money available at this time. If the case results in a settlement, eligible consumers will be notified through the court system. OpenClassActions.com will update this page as the case progresses. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.
For more class actions keep scrolling below.
