Conduent Agrees to $80M Settlement Over Breach of 62M People

Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million people in total.
Table of Contents
    Add a header to begin generating the table of contents

    Conduent has agreed to pay $80 million to settle a class action over a 2024 cyber incident that exposed the personal and health data of about 62 million people. The settlement was filed in US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the Securities and Exchange Commission.

    Conduent Settlement Terms and Court Filing

    The settlement covers a class action over a cyber incident in 2024. Final court approval would end Conduent’s civil liability for the incident. Conduent also agreed to strengthen its data security practices as part of the deal.

    The affected population of about 62 million people makes the case one of the larger breach class settlements measured by the number of affected individuals. The filing and the 8-K were reported on October 19.

    Two Subclasses Split by Where the Stolen Data Was Stored

    The settlement sorts the roughly 62 million affected individuals into two subclasses based on how accessible the stolen data was.

    About 40 Million People in Complex Backup Files

    The settlement divides the class into two groups. About 40 million people had stolen data stored in complex backup files that were not readily accessible.

    About 22 Million People in Readily Accessible Files

    The second subclass includes about 22 million people whose data sat in readily accessible files. Together the two subclasses account for the roughly 62 million affected individuals.

    How the $80 Million Will Be Used

    The settlement fund covers documented losses, credit and medical data monitoring, and legal fees. Only claimants with documented fraud or identity theft losses can claim direct cash, up to $3,500. Class members without documented losses are limited to the monitoring services the fund pays for.

    That structure means the cash payouts depend on proving actual financial harm. Across a class of 62 million, the fund of $80 million works out to a small amount per person on average, though the real distribution will depend on how many claimants file and what share of the fund goes to fees and monitoring.

    Timeline From Incident to Filing

    The cyber incident occurred in 2024. The settlement was filed on October 16, 2026, and reported on October 19. The case now moves to the court for approval.

    The scale of the incident is the main fact driving the settlement. About 62 million people had personal and health data exposed in the 2024 incident, and the settlement splits them by how their stolen data was stored. The 40 million in complex backup files and the 22 million in readily accessible files make up the whole class.

    The settlement’s use of the fund tracks what the class members can claim. Documented losses, credit monitoring and medical data monitoring, and legal fees all come from the $80 million. Direct cash is capped at $3,500 and limited to claimants who can document fraud or identity theft losses.

    Security Commitments and Pending Approval

    Conduent has committed to improving its data security practices, though the reporting available does not specify which measures it will adopt. The commitment forms part of the agreement that the court will review.

    The filing reaches courts and investors at the same time. The settlement was lodged in the District of New Jersey on October 16, 2026, and Conduent confirmed it in an 8-K filing with the SEC. Final court approval would end the company’s civil liability for the incident. The proposal does not state any admission of wrongdoing in the available reporting, and it does not address whether other claims related to the 2024 incident remain open. The reporting appeared on October 19, three days after the filing date. The affected population of about 62 million people places the case among the larger breach class settlements measured by the number of people involved, and the money must cover documented losses, credit and medical data monitoring, and legal fees. The two subclasses, about 40 million people with data in complex backup files and about 22 million with data in readily accessible files, share the same fund and the same $3,500 cap on direct cash for documented losses.

    Until the court grants final approval, the settlement remains a proposal. If approved, it would resolve the civil class action against Conduent over the incident, though it would not necessarily affect any regulatory inquiries or separate suits, and the filing does not address those.

    Related Posts