Conduent Data Breach Class Action Lawsuit: 2026 Settlement Payout & Claim Deadlines
Quick Answer
- Is it real? Yes, a settlement in principle was reached in August 2026.
- How much? Not yet determined. The settlement fund has not been disclosed.
- Key deadline: No claim deadline yet. Court approval must happen first.
When a company holding your medical and personal data gets hacked, the fallout doesn’t end with a notification letter. For Conduent Business Services, the January 2025 cyber incident triggered a wave of lawsuits that now cover more than 44 million people .
The cases consolidated into a single federal action in New Jersey. In August 2026, the parties reached a settlement in principle, according to court filings . But here’s what that means for you right now: nothing has been approved, nothing is being paid, and no claim forms exist yet.
This guide breaks down what’s confirmed, what’s still pending, and exactly how the process will unfold from here.
The Facts
| Topic | What You Need to Know |
|---|---|
| Case Name | In re: Conduent Business Services Data Breach Litigation |
| Court | U.S. District Court for the District of New Jersey |
| Case Number | 2:25-cv-16953-MEF-MAH |
| Status | Settlement in principle reached August 2026, not yet approved |
| Fund Size | Not yet confirmed |
| Est. Per Person | Not yet determined |
| Claim Deadline | TBD, watch the official settlement website |
| Administrator | Not yet appointed |
| Proof Needed | Check claim form once available |
Is the Conduent Data Breach Class Action Lawsuit Legit?
Yes, this is a real, court-supervised class action, not a scam or marketing ploy. The lawsuits were filed in federal court and consolidated by a judge.
The litigation stems from a January 13, 2025 cyber incident. Conduent discovered that a threat actor gained unauthorized access to a limited portion of its environment . The company later determined that the attacker exfiltrated files containing personal information belonging to end-users of its clients.
Multiple lawsuits were filed across the country. In November 2025, the U.S. District Court for the District of New Jersey consolidated them under the caption In re: Conduent Business Services Data Breach Litigation, Case No. 2:25-cv-16953 . Magistrate Judge Michael A. Hammer issued the consolidation order.
If you received a notification letter about this breach, you are not alone. More than 44 million individuals had sensitive personal and health information exposed .
How Much Could You Get from the Conduent Data Breach Settlement?
Not yet determined. The settlement fund amount has not been disclosed, and no per-person payout figure exists.
The settlement in principle was reached in August 2026, but the parties only disclosed it in a joint status report filed September 10, 2026 . Settlement paperwork has not been finalized, and the agreement has not received court approval .
Without a disclosed fund size, any payout estimate would be pure speculation. Data breach settlements typically allocate payments based on several factors:
- Documented losses: If you can prove out-of-pocket costs from the breach, you may recover more.
- Time spent: Many settlements offer compensation for hours spent dealing with the fallout.
- Pro rata distribution: If the fund is limited, payments are divided among all valid claimants.
The company stated it does not expect the settlement to have a material impact on its financial position, and it maintains cyber insurance coverage for the incident .
Key Takeaway: No payout amount exists yet because the settlement is not final. Anyone quoting a specific dollar figure right now is guessing.
How Do You File a Claim in the Conduent Data Breach Settlement?
You cannot file a claim yet. No claim form exists because the settlement has not been approved.
Here is the sequence that must happen before you can file:
- Finalize settlement paperwork: The parties must execute a formal settlement agreement.
- Preliminary court approval: A judge reviews and preliminarily approves the deal.
- Claims administrator appointed: The court selects an administrator to handle the process.
- Notice program launches: You receive notice with claim instructions and deadlines.
- Claim form becomes available: Only then can you file.
Until you receive official notice or see a court-approved website, do not submit personal information anywhere claiming to be the settlement administrator.
What Proof Will You Need for the Conduent Data Breach Claim?
Not yet confirmed. The proof requirements will be defined in the settlement agreement and claim form.
Based on typical data breach settlements, you should start gathering these documents now:
- Breach notification letter: The letter Conduent or your healthcare provider sent you.
- Documentation of losses: Receipts for credit monitoring, bank fees, or other expenses tied to the breach.
- Records of time spent: A log of hours spent dealing with fraud alerts, credit freezes, or identity theft issues.
- Proof of identity: Government-issued ID and any account statements showing your relationship to the breached entity.
Preserving these records now costs nothing. If the settlement includes reimbursement for documented losses, having the paperwork ready puts you ahead.
What Happened in the Conduent Data Breach?
A hacker accessed Conduent’s systems in January 2025 and stole files containing personal and health information. The company disclosed the incident in a quarterly filing.
On January 13, 2025, Conduent experienced an operational disruption and learned that a threat actor gained unauthorized access to a limited portion of its environment . The company activated its cybersecurity response plan and restored affected systems within days.
The investigation revealed that the threat actor exfiltrated files associated with a limited number of Conduent’s clients. Because the files were complex, Conduent hired data mining experts to analyze what personal information was contained in them .
The analysis confirmed that the data sets contained personal information of a significant number of individuals associated with Conduent’s clients’ end-users. Notification to impacted individuals began in October 2025 and was substantially concluded by mid-2026 .
The exfiltrated data has not been released on the dark web or otherwise publicly disclosed, to the company’s knowledge .
Who Is Affected by the Conduent Data Breach Lawsuit?
Anyone who received a breach notification letter from Conduent or one of its clients. The breach affected more than 44 million individuals .
The compromised information belonged to end-users of Conduent’s clients, which include major healthcare companies. The amended complaint names several defendants beyond Conduent itself, including:
- American International Group, Inc.
- Health Care Service Corporation
- The Cigna Group, Inc.
- Elevance Health, Inc.
- Humana, Inc.
- California Physicians’ Service (Blue Shield of California)
If you received a letter saying your personal information was involved in the Conduent breach, you are likely part of the proposed class. The class definition will be finalized in the settlement agreement.
Key Takeaway: You don’t need to do anything yet. The settlement is not final, no claim form exists, and no deadline has been set. Watch for official notice.
What Types of Information Were Compromised in the Conduent Breach?
Personal and health information was exposed. The company described it as “sensitive personal and health information” belonging to more than 44 million people .
The amended complaint references HIPAA obligations, noting that Conduent acted as a “business associate” to covered entities . Under HIPAA, business associates must implement administrative, technical, and physical safeguards for protected health information.
The exact categories of data vary by individual. Your notification letter should specify what types of your information were involved. Common categories in healthcare-related breaches include names, addresses, dates of birth, Social Security numbers, and medical record details.
When Will You Get Paid from the Conduent Data Breach Settlement?
Not yet determined. The settlement must receive final court approval before any payments are distributed.
The timeline from settlement in principle to payment typically follows this pattern:
| Stage | Expected Timing |
|---|---|
| Settlement paperwork finalized | Weeks to months |
| Preliminary court approval | 1 to 3 months after filing |
| Notice and claims period | 60 to 120 days |
| Final approval hearing | 3 to 6 months after preliminary |
| Payment distribution | 30 to 90 days after final approval |
Conduent noted that the timing of final court approval cannot be predicted with certainty . Appeals could add additional delays.
Reality Check: Beware of Conduent Settlement Scams
No legitimate settlement administrator will ever text you asking for payment to release your money. Data breach settlements are free to claim.
Scammers often piggyback on high-profile breaches like this one. They create fake websites, send phishing emails, or call pretending to be from the settlement administrator. Their goal is to steal your personal information or trick you into paying a “processing fee.”
The real settlement process will be supervised by a federal court. Official notices will come by mail or email from a court-appointed administrator. You will never be asked to pay to file a claim.
What Happens Next in the Conduent Data Breach Lawsuit?
The next step is finalizing the settlement agreement and seeking court approval. Here is the expected sequence:
Expected Q4 2026: Parties execute a formal settlement agreement with defined terms.
Expected Q4 2026 or Q1 2027: Plaintiffs file for preliminary approval.
Expected Q1 2027: Court grants preliminary approval and authorizes notice to the class.
Expected Q1 or Q2 2027: Claim period opens. Official notice sent to class members.
Expected Q2 or Q3 2027: Final approval hearing. If approved, payments follow.
Every stage depends on court scheduling and whether any appeals are filed.
Frequently Asked Questions
Is the Conduent data breach class action settlement real?
Yes, the settlement is real, but it is not final. Conduent reached an agreement in principle in August 2026, disclosed in a September 10, 2026 court filing . The deal still needs court approval before any money is paid.
How much will I get from the Conduent data breach settlement?
The payout amount is not yet determined. No settlement fund size has been disclosed. Until the agreement is finalized and approved, no per-person amount exists.
How do I file a claim for the Conduent data breach?
You cannot file a claim yet. No claim form exists. Once the settlement receives preliminary approval, a court-appointed administrator will send notice with filing instructions and a deadline.
When is the Conduent data breach claim deadline?
No deadline has been set. The claim period begins only after preliminary court approval. Watch for official notice from the settlement administrator.
Did Conduent admit wrongdoing in the data breach?
No. Conduent denied the plaintiffs’ allegations and stated it believes it has strong defenses. The company agreed to settle to avoid the costs and burdens of continued litigation .
How many people were affected by the Conduent data breach?
More than 44 million individuals were affected. The compromised data included sensitive personal and health information .
Do I need a lawyer to get money from the Conduent settlement?
No. Class members do not need their own lawyer to file a claim. The class representatives and their counsel represent the class. You can file a claim on your own once the form is available.
What if I received a Conduent data breach notification letter?
You are likely part of the proposed class. Keep the letter. It may serve as proof of your eligibility when the claim period opens.
Closing
Your action right now is simple: wait for official notice and preserve your documentation. Do not pay anyone promising to secure your settlement money. The only real updates will come from the federal court in New Jersey or a court-appointed administrator. The claim deadline does not exist yet, but when it does, it will be strict.
