Infosecurity Magazine reported on October 19 that Conduent will pay $80m to end a class action over a 2024 breach. About 62 million people had personal and health data taken. A court filing dated October 16 sorts claimants by where their data sat: about 40 million in hard-to-reach backup files, and 22 million in easy-to-reach files. Only people with documented fraud or identity theft losses can claim cash, up to $3,500.
Conduent told the SEC on October 16 that the deal admits no fault, which it denies. It said it has cyber insurance and expects no material financial impact. The court must still give final approval. Conduent also agreed to strengthen its data security. Infosecurity Magazine said the SafePay ransomware gang allegedly carried out the attack and claimed 8.5TB of stolen data. Conduent did not find the intrusion for almost three months. No approval date is given, and the security changes are not described.
This part is interpretation. The filing sorts victims by how reachable their stolen data was, so where a supplier keeps data now appears in legal papers. The sources do not say whether the split changes payouts. Buyers can ask suppliers what data sits in backups and how fast they would spot an intruder.