Conduent $80 Million Proposed Data Breach Settlement, Who Qualifies, What Benefits Are Offered and What Happens Next

Conduent has signed a proposed $80 million settlement of the class action over its 2025 data breach, which involved Social Security numbers, medical information and other personal data of about 62 million people. The agreement was filed in federal court in New Jersey on October 16, 2026, and the judge has not approved it yet. If it is approved, everyone in the class would get a year of free monitoring automatically, and class members could claim cash for documented fraud or identity-theft losses of up to $3,500. Members of one subclass, estimated at about 22 million people, could also claim a pro rata cash payment. No claim form is open, and no deadline has been set.

Conduent Data Breach Settlement Quick Facts

Detail	Information
Case name	In re: Conduent Business Services Data Breach Litigation
Case number	2:25-cv-16953 (D.N.J.)
Court	U.S. District Court, District of New Jersey (Judge Michael E. Farbiarz)
Defendants	Conduent Business Services, LLC; Conduent State & Local Solutions, Inc.; Conduent Incorporated
Settlement fund	$80,000,000 gross (see “How the $80 Million Fund Works” below)
Affected population	Approximately 62 million people (an estimate; see the class definition below)
Subclass A	About 40 million people whose data was taken but kept in a way not readily accessible to others
Subclass B	About 22 million people whose data was stored in files where it was readily accessible
Benefits	One year of monitoring for everyone; cash for documented losses up to $3,500; pro rata cash for Subclass B
Claim deadline	Not set; proposed at 75 days after notice begins
Opt-out and objection deadline	Not set; proposed at 90 days after notice begins
Final approval hearing	Not yet scheduled
Status	Signed and filed October 16, 2026; preliminary approval requested, not granted
Proposed administrator	Epiq Class Action & Claims Solutions, Inc. (subject to court approval)
Class counsel	Carella Byrne Cecchi Brody & Agnello, P.C.; Kopelowitz Ostrow P.A.; Milberg PLLC; Stueve Siegel Hanson LLP

Where Things Stand Right Now in the Conduent Settlement

• Plaintiffs asked the court on October 16, 2026 to preliminarily approve the settlement. Nothing is payable until the court approves it and it becomes final.
• The sources reviewed show no settlement website, finalized claim form or calendar deadline. Those come after preliminary approval. The agreement’s draft notices still contain placeholders for the website, phone number and dates.
• If the settlement fails to get final approval, the money goes back to Conduent. Conduent denies any wrongdoing.

What Happened in the Conduent Data Breach?

Conduent is a New Jersey-based business services company that handles document processing, payment integrity, mailroom and back-office work for commercial and government clients. For most people in the class, Conduent held their data because it works for their health plan. For others, it was because of services for an employer or a government benefits program. That is why many people affected have never heard of the company.

According to the settlement agreement, an unauthorized third party got into Conduent’s network starting around October 21, 2024, and copied files containing personal information. Conduent discovered the incident around January 13, 2025, and notification letters began going out in October 2025.

The files held some combination of names, Social Security numbers, addresses, dates of birth, medical information, health insurance information and financial account information. Not every person’s information included every category.

What Do the Conduent Data Breach Lawsuits Claim?

More than 30 putative class actions were filed in federal and state courts starting around October 27, 2025. They were consolidated in New Jersey federal court on November 24, 2025. The operative complaint, filed June 12, 2026, has 35 plaintiffs from 18 states and 16 causes of action. It alleges that Conduent failed to use reasonable cybersecurity measures and failed to notify people on time, and it names five Conduent clients (AIG Procurement Services, The Cigna Group, Elevance Health, Health Care Service Corporation and Humana) for allegedly failing to oversee how data was protected. The claims include negligence, negligence per se, contract-related theories, unjust enrichment and state consumer-protection and privacy claims.

Conduent denies the claims and disputes that a class could be certified for litigation. The agreement says the named clients admit nothing. The parties settled after a mediation on August 13, 2026 in Philadelphia before retired U.S. Magistrate Judge Diane M. Welsh of JAMS. These are allegations, not findings of liability.

Related article: Google Assistant Class Action, Judge Approves $22.67 Million in Attorney Fees Despite Rejecting $3,000 Hourly Rate

Who Is Included in the Proposed Conduent Settlement Class?

The 62 million figure is an estimate of how many people were affected. The settlement class is defined more narrowly. Under the filed agreement, the class is everyone residing in the United States who is on Conduent’s Class List, meaning they were sent actual or substitute notice from Conduent or one of its clients that their private information may have been affected.

In plain terms:

• A breach notice tied to Conduent is the starting point. The class list, not whether you think you were affected, decides who is in the class.
• You must reside in the United States.
• Your notice should say which subclass you are in. Subclass A has an estimated 40 million people and Subclass B an estimated 22 million.
• The subclasses reflect how the data was stored, not which health plan or program you used.
• The agreement’s full definition and any exclusions control, and the court may change the class definition when it rules on approval.

Because the settlement notice is expected to go mostly by email and Conduent says it does not keep email addresses for class members, some people may be reached through other methods or publication. If you received a Conduent-related breach letter from a health plan, employer or benefits program and get no settlement notice, contact the administrator once the settlement website goes live.

Does a Conduent Breach Letter Guarantee a Cash Payment?

No. The letter helps show you may be on the class list, but cash requires a valid claim. Monitoring is the only benefit proposed to go to class members automatically.

How the $80 Million Conduent Settlement Fund Works

The $80 million is a gross cash fund. It is not a promise that each of the 62 million people will receive an equal share, and dividing $80 million by 62 million does not produce a reliable payout figure.

• One fund pays for everything. The fund covers administration costs, the monitoring for the whole class, documented-loss claims, service awards, court-approved attorneys’ fees and costs, and the pro rata payments. Conduent owes nothing beyond the $80 million.
• Fees come out first. Class counsel will ask for up to 34% of the fund, which is $27.2 million, plus reasonable costs. Each class representative can request a service award of up to $1,500, which is up to $52,500 if all 35 named plaintiffs are approved. The court can award less, and the settlement does not depend on the fee request.
• The net fund pays the pro rata amount. What remains after those costs and the verified documented-loss claims is divided among Subclass B members who file valid pro rata claims. The amount will not be known until claims are verified and the court rules on fees.
• Leftover money goes to charity. If money remains 180 days after payments are sent, it goes to a court-approved charity (cy pres).
• If approval fails, the money goes back to Conduent.
• Funding is quick. Conduent is to fund the $80 million within 14 days of preliminary approval.

What Benefits Does the Conduent Settlement Offer?

Free Monitoring for Everyone in the Class

Every class member who stays in would receive one year of monitoring through CyEx, Inc. with no claim form. You get an activation code in your notice, and it works only after the settlement becomes final.

Benefit	Subclass A	Subclass B
Monitoring product	Financial Shield (credit monitoring)	Medical Shield (medical data monitoring)
Duration	One year	One year
Credit monitoring	One bureau	One bureau
Other features	Financial account and spending monitoring, high-risk transactions, dark web scanning	Dark web and public-web marketplace monitoring for medical information
Identity theft insurance	$1 million, no deductible	$1 million, no deductible

This monitoring is separate from the earlier credit-monitoring offer in Conduent’s original breach letters.

Cash for Documented Losses, Up to $3,500

Any class member can claim up to $3,500 per person for unreimbursed losses from fraud or identity theft that were more likely than not caused by the breach and incurred after it. You must send reasonable documentation, such as receipts, account statements showing unauthorized charges, bills for professional help with identity theft, or costs of freezing or unfreezing credit. A personal statement alone does not count, and expenses already reimbursed elsewhere cannot be paid again. $3,500 is a maximum. A claim can be approved for less or rejected.

Pro Rata Cash Payment for Subclass B

Subclass B members can also elect an equal-share cash payment without documenting any loss. Subclass B members who lived in California on October 21, 2024 would get a 20% increase. The agreement’s own example is a $50 payment becoming $60. Subclass A does not have this option.

Security Commitments by Conduent

Conduent will give class counsel a confidential declaration of its post-breach security steps and says it will make good-faith efforts to commit sufficient resources to meet the HIPAA Security Rule. That is not a finding that Conduent previously violated HIPAA.

What Do You Give Up if You Stay in the Conduent Settlement?

If you stay in the class, you release Conduent and its clients, and those clients’ customers, from claims related to the breach and the breach notices, including claims you do not know about yet. That includes health plans such as those named in the lawsuit. Your only remedy for those claims becomes this settlement. If you opt out, you keep the right to sue but receive no benefits, and opting out also bars you from objecting.

What Is the Conduent Settlement Timeline?

The agreement sets deadlines relative to the day the judge grants preliminary approval. Actual dates will be posted once the court rules.

Step	Timing
Conduent funds the $80 million	Within 14 days of preliminary approval
Conduent gives the Class List to the administrator	Within 20 days of preliminary approval
Email and publication notice begins	Within 40 days of preliminary approval
Reminder email	30 days after notice begins
Fee motion filed	70 days after notice begins
Claim deadline	75 days after notice begins
Opt-out and objection deadline	90 days after notice begins
Final approval motion filed	100 days after notice begins
Cash payments sent	Within 60 days after the settlement becomes final (the Effective Date)
Monitoring codes activated	Within 60 days after the settlement becomes final

Earlier dates: breach began about October 21, 2024; discovered January 13, 2025; first lawsuits October 27, 2025; consolidated November 24, 2025; amended complaint June 12, 2026; mediation August 13, 2026; settlement signed and filed October 16, 2026.

How Do You Opt Out of or Object to the Conduent Settlement?

You can opt out in writing or online, but the request must be personally signed, include the case name and number, your contact details and a clear statement that you want out. Group opt-outs are not allowed. Objections go to the court and need the case number, your contact information, your reasons, details on prior objections you or your lawyer have filed in the past five years, and your signature. They must also say whether you used artificial intelligence to prepare them. An objection that misses a requirement can be thrown out on procedure alone. Only people who stay in the class can object.

Which Laws Apply to the Conduent Data Breach Class Action?

Federal Rule of Civil Procedure 23: Class Settlement Approval

Rule 23(e) requires court approval of a class settlement. At preliminary approval, the judge decides whether the court will likely be able to approve the deal and whether notice should go to the class. After notice and a hearing, the court decides whether the settlement is fair, reasonable and adequate. Rule 23(c)(2)(B) governs the content of notice in damages classes, and Rule 23(h) governs attorneys’ fee requests. Official rule: Federal Rule of Civil Procedure 23.

Class Action Fairness Act Notice, 28 U.S.C. § 1715

Defendants must notify the U.S. Attorney General and state officials of a proposed class settlement within 10 days of filing it, and a court cannot grant final approval sooner than 90 days after those notices are served.

HIPAA Security Rule and Breach Notification Rule

HIPAA’s Security Rule (45 C.F.R. Part 164, Subpart C) requires safeguards for electronic protected health information, and its Breach Notification Rule (45 C.F.R. §§ 164.400 to 164.414) generally requires notice without unreasonable delay and no later than 60 days after discovery. Companies that handle health data for health plans can be “business associates” under HIPAA. HIPAA is enforced by the Department of Health and Human Services’ Office for Civil Rights and, under HITECH (42 U.S.C. § 1320d-5(d)), by state attorneys general. It does not give individuals a private right to sue, so private plaintiffs usually rely on negligence and state-law claims.

New Jersey Consumer Fraud Act and Identity Theft Prevention Act

Conduent is based in New Jersey. The New Jersey Consumer Fraud Act (N.J.S.A. 56:8-1 et seq.) provides a private action with treble damages for ascertainable loss, and the Identity Theft Prevention Act (N.J.S.A. 56:8-161 et seq.) includes the state’s breach-notification requirement (N.J.S.A. 56:8-163). Other states’ laws also matter because plaintiffs came from 18 states.

California Privacy and Medical Information Laws

The 20% bump for California Subclass B residents reflects California’s stronger privacy remedies. These include the California Consumer Privacy Act’s breach-related private right of action (Cal. Civ. Code § 1798.150), which allows statutory damages per consumer per incident for certain unencrypted personal information, and the Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq.). The settlement does not say it adopts those remedies, and each state’s law is different.

Federal Standing in Data Breach Cases

Federal courts require a concrete injury. TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), tightened that rule for statutory claims, and the Third Circuit, which includes New Jersey, addressed data-breach standing in Clemens v. ExecuPharm Inc., 48 F.4th 146 (3d Cir. 2022). Standing is one reason data breach cases often settle early.

FTC Act Section 5

The FTC can treat unreasonable data security as an unfair or deceptive practice under 15 U.S.C. § 45. The FTC enforces that provision, and private individuals cannot sue under it.

What Should Conduent Data Breach Victims Do Now?

1. Keep your breach notice from Conduent, your health plan, employer or the benefits program.
2. Freeze your credit for free. Federal law (15 U.S.C. § 1681c-1) lets you place and lift a security freeze at each credit bureau at no charge.
3. Review your credit reports at AnnualCreditReport.com and your bank statements for unfamiliar activity.
4. Read your health insurance Explanation of Benefits for services or claims you do not recognize, which can signal medical identity theft.
5. Consider an IRS Identity Protection PIN to help prevent someone from filing a tax return with your Social Security number.
6. Document losses. Keep receipts, statements and notes of time and money spent dealing with fraud, since these support a $3,500 claim.
7. Report identity theft at IdentityTheft.gov, and report suspected HIPAA problems to the Department of Health and Human Services.
8. Avoid unofficial claim sites. Do not give your Social Security number or bank details to any website claiming to pay Conduent settlement money. Wait for the court-approved site and administrator.
9. Check for updates after the court rules on preliminary approval.

Other Related Conduent and Data Breach Coverage

For earlier coverage of the incident, see Conduent Data Breach Class Action 2026 10 Feb Update, 25M+ Victims, 10+ Lawsuits Filed—Free Credit Monitoring Deadline March 31 and Conduent Data Breach Update, 14.7 Million Victims in Texas Alone, 10+ Class Actions Filed, Free Credit Monitoring Deadline March 31, 2026.

Conduent is far larger than most health data breach cases. For smaller ones with similar benefits, see Signature Performance $8.5M Data Breach Settlement, Claim Up To $5,000 By May 7, 2026 and $4M ALN Medical Management Data Breach Class Action Settlement, File Your Claim By April 3, 2026 For Up To $5,000. Both claim periods have closed.

Frequently Asked Questions About the Conduent $80 Million Data Breach Settlement

How much is the Conduent data breach settlement?

$80 million, paid into a single fund that covers all costs, fees, monitoring and payments to class members. Conduent owes nothing beyond that.

Is the Conduent settlement approved?

No. Plaintiffs asked for preliminary approval on October 16, 2026, and the court has not ruled. A final approval hearing has not been scheduled.

Who qualifies for the Conduent data breach settlement?

People who live in the United States and are on Conduent’s Class List because they received actual or substitute notice that their information may have been affected. About 40 million are in Subclass A and about 22 million are in Subclass B.

Is everyone affected by the Conduent breach in the class?

Not automatically. The roughly 62 million figure is an estimate of those affected, while the class is defined by the Class List and the agreement’s terms.

Do I need to file a claim for the Conduent settlement?

Not for the monitoring, which every class member gets automatically. You must file a claim for cash, either documented losses up to $3,500 (everyone) or the pro rata payment (Subclass B).

Can I get $3,500 from the Conduent settlement?

Possibly, but $3,500 is the maximum for documented losses and requires a valid claim with records. It is not a flat payment.

How much cash will Subclass B members get?

No set amount. It depends on what is left after costs and how many people claim, with a 20% increase for California residents.

What is the difference between Subclass A and Subclass B?

The subclasses reflect how the information was stored. Subclass A would get Financial Shield credit monitoring. Subclass B would get Medical Shield monitoring and can also elect a pro rata cash payment.

When is the Conduent settlement claim deadline?

Not set. The agreement proposes 75 days after notice begins, and notice begins within 40 days after preliminary approval.

When will Conduent settlement payments be sent?

No date is confirmed. The agreement proposes cash payments within 60 days after the settlement becomes final.

Did Conduent admit it did anything wrong?

No. Conduent denies the allegations and says the settlement is not an admission of liability. Its SEC filing says the company has cyber insurance and does not expect a material financial impact.

What data did the Conduent breach expose?

Some combination of names, Social Security numbers, addresses, dates of birth, medical information, health insurance information and financial account information.

Sources and Official Records

1. Conduent Incorporated, Form 8-K filed with the SEC, October 16, 2026 (SEC filing)
2. Class Action Settlement Agreement and Release, In re: Conduent Business Services Data Breach Litigation, No. 2:25-cv-16953 (D.N.J.), Doc. 173-2, filed October 16, 2026, as Exhibit 10.1 to the 8-K (readable copy)
3. Law360, Conduent Inks $80M Breach Deal With 62M Class Members, October 16, 2026
4. Federal Rule of Civil Procedure 23
5. 28 U.S.C. § 1715; 45 C.F.R. Part 164; 15 U.S.C. §§ 45 and 1681c-1; N.J.S.A. 56:8-1 et seq.; Cal. Civ. Code §§ 56 et seq. and 1798.150; TransUnion LLC v. Ramirez, 594 U.S. 413 (2021); Clemens v. ExecuPharm Inc., 48 F.4th 146 (3d Cir. 2022)

Update log: October 17, 2026, article published following the October 16, 2026 filing. It will be updated when the court rules on preliminary approval and the claim process opens.

This article is for informational purposes only and is not legal or medical advice. The official settlement agreement, court orders and finalized notice control if this summary differs.

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against Conduent’s SEC Form 8-K, the Settlement Agreement filed in the District of New Jersey, and Law360 reporting, as of October 17, 2026 (no official settlement website exists yet). Last Updated: October 17, 2026.