10.5M records exposed: Conduent faces massive litigation over the 8th largest healthcare data breach in U.S. history

Conduent data breach overview:

• Who: Multiple plaintiffs have filed class action lawsuits against Conduent Business Services LLC.
• Why: Plaintiffs allege Conduent failed to secure and safeguard the PII and PHI of 10.5 million individuals in a breach that now ranks as the eighth-largest healthcare data breach in U.S. history.
• Where: The lawsuits were filed in New Jersey federal court.

Conduent is facing a growing wave of federal class action lawsuits after a massive data breach exposed the personal and health information of more than 10.5 million insurance customers — an incident that court filings say ranks as the eighth-largest healthcare data breach ever recorded.

The scale of the litigation is similarly significant. With at least 10 class actions filed so far, the Conduent data breach litigation is quickly becoming one of the largest healthcare-related data breach cases to date.

Conduent provides technology-driven services to many of the most prominent players in the healthcare and pharmaceutical industries, including several major Blue Cross Blue Shield entities and Premera Blue Cross.

In one of the newest class action lawsuits, filed Nov. 4, plaintiff Brandon Berkenfeld alleges Conduent discovered in January that an unauthorized third party had infiltrated its systems from October 2024 to January 2025 and exfiltrated files containing names, Social Security numbers, dates of birth, medical information and health insurance data.

Berkenfeld claims Conduent failed to safeguard this sensitive information and did not provide timely notice to those affected. He seeks to represent a nationwide class of individuals whose PII and PHI were accessed or acquired during the breach.

Eighth-largest healthcare data breach ever, complaints say

Court filings describe the breach and the ensuing litigation as unprecedented. Plaintiffs argue the breach’s massive scope places it among the top 10 largest healthcare data breaches in U.S. history, with more than 10.5 million patients affected.

In a separate class action lawsuit, plaintiff Eric Larson of Montana alleges that Conduent and Blue Cross Blue Shield of Montana violated HIPAA, the Federal Trade Commission Act and other laws by failing to implement adequate cybersecurity safeguards and delaying breach notifications. He also claims the stolen data has already been published on the dark web, leaving victims at “imminent, immediate and continuing increased risk” of identity theft and financial harm.

Across the growing list of cases, plaintiffs collectively accuse Conduent of negligence, negligence per se, breach of third-party beneficiary contract and unjust enrichment.

The class action lawsuits seek class certification, compensatory and statutory damages, and injunctive relief requiring Conduent to upgrade its cybersecurity practices and monitoring protocols.

Blue Shield of California faced a similar lawsuit earlier this year, alleging patient data was exposed through its use of Google Analytics.

What do you think of the allegations made in these Conduent data breach lawsuits? Let us know in the comments.

The proposed classes are represented by Lite DePalma Greenberg & Afanador LLC, Milberg PLLC, Morgan & Morgan PA, The Dann Law Firm, Edelson Lechtzin LLP, Carella Byrne Cecchi Brody & Agnello PC, Goetz Geddes & Gardner PC, Kimmel & Silverman PC, Wolf Haldenstein Adler Freeman & Herz LLP, and Schubert Jonckheer & Kolbe LLP. 

The Conduent data breach class action lawsuits are in the U.S. District Court for the District of New Jersey and include: 

• Kennedy et al. v. Conduent Business Services LLC et al., Case No. 2:25-cv-17233
• Larson v. Conduent Business Services LLC et al., Case No. 2:25-cv-17242
• Bianco v. Conduent Business Services LLC, Case No. 2:25-cv-17177
• Burwell v. Conduent Business Services LLC, Case No. 2:25-cv-17170
• Fray et al. v. Conduent Business Services LLC, Case No. 2:25-cv-17137
• Waters et al. v. Conduent Business Services LLC et al., Case No. 2:25-cv17218
• Heller v. Conduent Business Services LLC, Case No. 2:25-cv-17209
• Moody et al. v. Conduent Business Services LLC, Case No. 2:25-cv-17227
• Berkenfeld v. Conduent Business Services LLC, Case No. 2:25-cv-17197

Read About More Class Action Lawsuits & Class Action Settlements:

• New Visa Mastercard settlement expected to save merchants more than $200 billion in card fees, ending two decades of antitrust litigation
• Class action accuses U-Haul of deceptive ‘drip pricing’ that hides fees
• ByHeart recalls infant formula due to potential botulism risk
• Class action accuses Modern Gents of advertising fake jewelry discounts