Conduent $80M Data Breach Settlement: Who Qualifies and What to Do Now
Published
If you got a letter this year about a "data security incident" from a company called Conduent, you're one of about 62 million people whose personal and medical information was in files stolen from it. On October 16, 2026, Conduent agreed to pay $80 million to settle the class action over the breach.
It's one of the largest health data breaches in US history, and the settlement terms are more complicated than most. Not everyone gets the same benefits, and you can't file a claim yet. Here's what the settlement agreement actually says, and what you should do while you wait.
What Happened at Conduent
Most people have never heard of Conduent, and that's part of the problem. The New Jersey company works behind the scenes for health plans, employers and government benefit programs. It processes claims, payments and paperwork, which means it holds data about people who never chose to do business with it. News reports and law firms have named insurers such as Blue Cross Blue Shield of Texas and Montana, Humana and Premera Blue Cross among the affected clients.
According to the settlement agreement, attackers got into Conduent's systems on or about October 21, 2024, and the company discovered the intrusion on January 13, 2025. The stolen files contained some combination of:
- Names, addresses and dates of birth
- Social Security numbers
- Medical and health insurance information
- Financial account information
Many people didn't receive their notification letter until early 2026, more than a year after the attack. Conduent denies any wrongdoing, which is standard in settlements like this one.
The federal HHS breach portal lists it at 62,224,658 people, the third-largest health data breach it has ever recorded.
Who Qualifies, and Why Your Subclass Matters
The settlement covers US residents who are on Conduent's class list and were notified, by Conduent or by one of its clients, that their information may have been affected. If you got a breach letter, you're almost certainly in. The class is split into two subclasses, and which one you're in decides what you can get:
| Subclass | Who it covers | Benefits |
|---|---|---|
| Subclass A (about 40 million) | Data was stolen but kept in files that weren't readily accessible | 1 year of credit monitoring + up to $3,500 for documented losses |
| Subclass B (about 22 million) | Data was stolen in files that were readily accessible | 1 year of medical data monitoring + up to $3,500 for documented losses + a pro rata cash payment |
In other words, only Subclass B can get cash without proving a loss. Subclass B members who lived in California on October 21, 2024, get an extra 20% on top of their cash payment, called a California Statutory Payment. The settlement notice you'll receive will tell you which subclass you're in.
Both monitoring packages include $1 million in identity theft insurance, and you don't need to file a claim to get them. You'll just have to activate a code once the settlement takes effect.
How Much Will You Actually Get?
Nobody knows yet, and anyone who gives you a dollar figure today is guessing. The $80 million is the total fund. Before anything reaches class members, it also has to cover attorney fees (up to 34%, or $27.2 million), the cost of the monitoring, and notice and administration costs. What's left is divided among Subclass B members who file a claim.
With 22 million people eligible, the pro rata payment is likely to be small. The settlement also has no payment for lost time, which many other breach settlements include. The $3,500 cap is the only way to recover a larger amount, and only with real documentation like receipts or bank statements. A written statement on its own won't count.
For a sense of scale: in AT&T's $177 million breach settlement, most people will get under $50. Our guide on how data breach settlements pay explains why the numbers shrink so fast.
When You Can File
Status as of October 22, 2026: the settlement is waiting for preliminary approval from Judge Michael E. Farbiarz in the US District Court for the District of New Jersey (In re: Conduent Business Services Data Breach Litigation, No. 2:25-cv-16953). There is no official settlement website or claim form yet.
Once the judge signs off, the agreement sets the clock:
- Within 40 days: the administrator, Epiq, starts sending notices by email and mail, with your unique ID and subclass.
- 75 days after notice starts: the deadline to file a claim.
- 90 days after notice starts: the deadline to opt out or object.
- After final approval: payments go out within 60 days of the settlement taking effect, which can take months longer if anyone appeals.
Realistically, claims will probably open in early 2027 and money won't arrive until later that year at the earliest.
What to Do While You Wait
- Keep your Conduent letter. It shows you're in the class and may help if your settlement notice never arrives.
- Start saving proof of losses. Fraudulent charges, bank fees, credit freeze costs and even postage count toward the $3,500 if they came after the breach. Keep everything in one folder.
- Freeze your credit at Equifax, Experian and TransUnion if your Social Security number was in the letter. It's free and doesn't depend on any settlement.
- Read your health insurer's Explanation of Benefits. Medical identity theft shows up there first, as visits or prescriptions you never had. Report anything unfamiliar to your insurer right away.
- Check where else your email has leaked with the Data Breach Check, and make sure your passwords aren't in public leak lists with the Password Breach Check.
Fake "Conduent settlement" sites and texts are almost guaranteed to show up before the real one does. Until preliminary approval, no real claim site exists. A real one will never charge a fee or ask for your full Social Security number by text or email. You can check when a site's domain was registered with our WHOIS Lookup. A domain created last week is a red flag.
The Conduent settlement won't make anyone whole. The stolen data is already out there, and for most people the cash, if any, will be modest. But the free monitoring is worth activating, the $3,500 reimbursement is real if you keep your paperwork, and the best protection, a credit freeze and an eye on your insurance statements, is something you can do today. We'll update this article when the claim site goes live.