An $80 million settlement has been proposed to resolve the consolidated class action lawsuit against Conduent Business Services, LLC, over its October 2024 cyberattack. If you received a breach notice from Conduent or from a company that uses its services, now is the time to understand how a Conduent data breach settlement claim might work and what to do while the deal moves toward approval.

The settlement is still a proposal, so terms can change before a court signs off. This article sticks to what has been reported and flags where readers should confirm details with the official settlement administrator.

What the Conduent breach exposed

Conduent is a business services contractor, the kind of back-office company most people never deal with directly. Organizations hand it work, and their customers, patients, or members end up in its systems without ever choosing the company themselves.

According to reporting in the search results we reviewed, the investigation found that attackers had access to sensitive data from October 21, 2024, to January 13, 2025, just under three months. The SafePay ransomware group claimed responsibility and said it stole 8.5 terabytes of data. That claim comes from the group itself, so treat it as an assertion rather than a confirmed figure.

The size of the affected population has also grown over time. Malwarebytes noted in October 2025 that notifications filed with multiple state attorneys general pointed to more than 10.5 million people. A more recent report from GovInfoSecurity describes the hack as affecting 62.2 million people. The gap shows how breach counts tend to rise as investigations and notifications continue.

Who may be eligible for the $80 million settlement

The source reporting does not spell out the class definition, so we cannot say precisely who qualifies. In most data breach class actions, eligibility depends on having received a notice or having had personal information held by the company at the time of the incident. Confirm the actual criteria on the official settlement website once it is published.

Here are practical signs you may be in the group:

  • You received a breach letter from Conduent, or from an employer, health plan, or government program that works with it.
  • You are unsure whether your plan or program used Conduent, and you want to check with that organization.
  • A family member received a notice that mentions Conduent.

Because Conduent works behind the scenes, many people will not recognize the name. Letters sometimes get mistaken for scams, which is understandable. If a notice looks unfamiliar, do not click links in it. Look up the contact information for the organization that sent it through an independent source, such as the website printed on your insurance card.

How to file a claim and what to watch for

The settlement has been proposed, not finalized. A court generally has to give preliminary approval, notify class members, and then hold a final approval stage. Claim forms and deadlines usually become available through an administrator during that process. We have no confirmed deadline from the source material, so do not rely on any date you see repeated in forums or social posts.

When the claim process opens, keep these points in mind:

  • Use only the official settlement site. Fake claim pages are a common follow-on scam after large breaches. Reach the site through the notice you received or through the court-approved information, not through ads or unsolicited messages.
  • Never pay to file. A legitimate settlement claim does not require a fee.
  • Gather your documents. Keep your breach notice, any claim ID it includes, and records of time or money spent dealing with the fallout, in case the claim form asks for them.
  • Read the options. Settlements sometimes offer different benefits depending on your situation, such as documented losses or credit monitoring. Check which ones apply here.
  • Mind the deadline. Missing it can mean losing your share, so note it as soon as it is announced.

Steps to protect yourself after a third-party breach

A settlement payment, if you receive one, is not the same as protection. Stolen personal data can be misused long after a claim is paid, so take these steps regardless of the outcome.

  1. Freeze your credit. A freeze at each credit bureau is free and blocks most new accounts opened in your name. You can lift it temporarily when you need to apply for credit.
  2. Review statements and explanation of benefits. Look for charges, medical claims, or accounts you do not recognize.
  3. Be skeptical of messages that mention the breach. Attackers know victims are expecting letters and calls. Verify any contact through official channels.
  4. Use unique passwords and multi-factor authentication. This limits the damage if any exposed details are reused elsewhere.
  5. Consider an identity protection PIN or similar safeguards offered by tax and government agencies, where available.

This incident fits a wider pattern in which the weak point is a vendor, not the organization you chose to trust. The Oracle Health breach, where stolen logins exposed millions of records, is another example of healthcare data sitting with a third party. Likewise, the Denmark CPR data breach shows that large record sets can be exposed without any flashy technique.

What This Means For You

You probably cannot avoid every contractor that handles your data, but you can control how quickly you respond. If you received a Conduent notice, treat it as real, verify it through trusted channels, and prepare for the claim process. Whether the payout is large or small, the protective steps above cost little and reduce your exposure.

Key takeaways

  • The proposed $80 million deal would resolve the consolidated class action over the October 2024 Conduent cyberattack, but it still needs court approval.
  • Check your mailbox and email for a notice, and confirm eligibility only through official settlement channels.
  • File your Conduent data breach settlement claim before the deadline once it is announced, and never pay a fee to do so.
  • Freeze your credit, watch your accounts, and treat breach-related messages with suspicion.

Check your eligibility now, set a reminder for the claim deadline, and lock down your credit while you wait.