Is there a Conduent data breach settlement I can file for?

No. As of March 2026, there is no settlement, no claim form, and no payout available. Over 35 class action lawsuits have been consolidated in New Jersey federal court, but the case is in its early stages. Defendants have until April 20, 2026 to respond. A settlement could take months to years.

Who was affected by the Conduent data breach?

Over 10.5 million health insurance customers across the United States were affected. The breach impacted clients of several major insurers, including multiple Blue Cross Blue Shield entities. An estimated 4 million of those affected are Texas residents. The stolen data includes names, addresses, dates of birth, Social Security numbers, and health information.

How much could the Conduent data breach settlement be worth?

No settlement amount has been proposed. Given the scale (10.5 million affected) and the sensitivity of the data (health records, SSNs), this case could potentially result in one of the larger healthcare data breach settlements if it resolves. But no dollar figure has been announced and the litigation is in its earliest stage.

Does accepting the free credit monitoring from Conduent prevent me from joining a lawsuit?

According to available information, accepting the free credit monitoring offered by Conduent does not waive your right to participate in a class action lawsuit. However, some consumer advocates warn that you should read the terms of service carefully before enrolling in any company-offered identity protection program. The enrollment deadline for the free monitoring was March 31, 2026.

Where are the Conduent data breach lawsuits being handled?

All federal class action lawsuits have been consolidated in the U.S. District Court for the District of New Jersey under Judge Michael A. Hammer. An eight-member Plaintiffs' Steering Committee was appointed on December 22, 2025 to coordinate the litigation. An amended complaint consolidating 35 individual suits was filed on March 18, 2026.

Biggest U.S. Health Data Breach? Conduent Exposed 10.5 Million Insurance Customers -- 35+ Class Action Lawsuits Filed

By Steve Levine

Conduent Data Breach Class Action Lawsuit 10.5 Million Health Insurance Blue Cross Blue Shield SSN Stolen 2026

Published: March 28, 2026

For nearly three months, from October 21, 2024 to January 13, 2025, hackers had access to the systems of Conduent Business Services, a company most people have never heard of but which handles back-office processing for some of the largest health insurers in the country. When the breach was finally discovered and stopped, over 10.5 million people had their personal and health information stolen -- names, addresses, dates of birth, Social Security numbers, and clinical data.

It took Conduent nearly 10 months to notify most of those people. Letters postmarked October 24, 2025 did not reach some consumers until late January 2026. By then, more than 35 class action lawsuits had been filed.

There is no settlement. There is no claim form. There is no money available. But this is shaping up to be one of the largest healthcare data breach cases in U.S. history, and if you had health insurance through Blue Cross Blue Shield or another major insurer, you may have been affected.

What Is Conduent and Why Does This Matter?

Conduent Business Services is a New Jersey-based company that provides mailroom, payment processing, and back-office support services for health care agencies and insurers. It was spun off from Xerox in 2017 and handles data for more than 100 million Americans. Its clients include several major Blue Cross Blue Shield entities, Premera Blue Cross, and other insurance companies. Conduent reported $3.4 billion in revenue in 2024.

When Conduent was breached, it was not just one insurance company's data at risk -- it was the data of millions of customers across multiple insurers nationwide. The Texas Attorney General called it "likely the largest breach in U.S. history." Court filings rank it as at least the eighth-largest healthcare data breach ever recorded.

What Data Was Stolen?

The breach exposed some combination of names, addresses, dates of birth, Social Security numbers, email addresses, telephone numbers, and clinical health information. The specific data involved varies by person, but the inclusion of both Social Security numbers and health records makes this breach especially dangerous -- it creates risks of both financial identity theft and medical identity fraud.

Who Was Affected?

Over 10.5 million health insurance customers nationwide were affected. Blue Cross Blue Shield customers are among the most heavily impacted, given the size of BCBS's market share. In Texas alone, an estimated 4 million people were affected -- BCBS holds over 26% of the health insurance market in that state.

If you received a letter from Conduent Business Services about this breach, you are affected. If you had health insurance through a company that used Conduent for back-office services during the breach period (October 2024 through January 2025), your data may have been compromised even if you have not yet received a notification.

Where Do the Lawsuits Stand?

More than 35 class action lawsuits have been filed against Conduent in the U.S. District Court for the District of New Jersey. All cases have been consolidated under Judge Michael A. Hammer. On December 22, 2025, the court appointed an eight-member Plaintiffs' Steering Committee to coordinate the litigation.

The latest amended complaint bringing 35 individual suits under a single petition was filed on March 18, 2026. Conduent, Health Care Service Corporation (Blue Cross Blue Shield), and AIG Procurement Services all have until April 20, 2026 to respond. Plaintiffs must respond to any motions to dismiss by May 20.

The lawsuits allege Conduent failed to implement adequate cybersecurity safeguards, failed to comply with HIPAA, and took nearly 10 months to notify affected individuals after the breach was discovered. Claims include negligence, breach of contract, violations of the FTC Act, and violations of state consumer protection laws.

How Long Will This Take?

Class action lawsuits of this size typically take years to resolve. Right now, the defendants have not even responded to the consolidated complaint. It could be another three months before a judge decides whether the case can proceed past motions to dismiss. Settlement discussions may or may not be underway behind the scenes, but nothing will be public until an agreement is nearly finalized.

For context, Conduent has already spent $9 million on breach notification costs and expects another $16 million in costs by the first quarter of 2026. The company holds a cyber insurance policy but acknowledges that litigation costs, regulatory fines, and reputational damage could significantly impact its financial position.

What Should You Do Right Now?

If you received a notification letter from Conduent, hold onto it. Monitor your credit reports for suspicious activity. Consider placing a fraud alert or credit freeze with all three major credit bureaus.

Conduent offered affected individuals two years of free credit monitoring and identity restoration services. The enrollment deadline was March 31, 2026. According to available information, accepting the free credit monitoring does not waive your right to participate in a future class action settlement.

There is no claim form available and no settlement to file for right now. When a settlement is reached, a dedicated website will be created, emails and letters will be sent to affected consumers, and a claim form will become available with a deadline. OpenClassActions.com will publish a full settlement page when that happens.

Be cautious about any website or ad claiming you can already file a Conduent data breach claim for money. No legitimate claims process exists at this time.

Case Information

Case: In re: Conduent Business Services Data Breach Litigation (consolidated)
Court: U.S. District Court, District of New Jersey
Judge: Hon. Michael A. Hammer
Defendant: Conduent Business Services LLC
Also Named: Health Care Service Corporation (BCBS), AIG Procurement Services
Breach Period: October 21, 2024 through January 13, 2025
Data Exposed: Names, addresses, DOB, SSN, email, phone, clinical health info
People Affected: Over 10.5 million
Lawsuits Filed: 35+ (consolidated)
Steering Committee: Appointed December 22, 2025
Defendants' Response Due: April 20, 2026
Settlement: None -- early-stage litigation
Claim Form: None -- does not exist

How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:

About This Article

This is an active, early-stage consolidated class action lawsuit. There is no settlement, no claim form, and no money available at this time. If the case results in a settlement, eligible consumers will be notified through the court system. OpenClassActions.com will update this page as the case progresses. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.

For more class actions keep scrolling below.