Conduent Breach Hits Volvo Group: Nearly 17,000 Employees' Data Exposed

"Truck, bus and industrial equipment maker Volvo Group North America is one of the several major companies impacted by a recent data breach at business services provider Conduent. Conduent detected an intrusion on its network on January 13, 2025, and an investigation revealed that the hackers had access to its network since October 21, 2024. The attackers obtained personal information such as names, addresses, SSNs, dates of birth, health insurance data, and medical information."

"The Safepay ransomware group took credit for the attack on Conduent in February 2025. In recent notifications sent to impacted individuals on behalf of Volvo Group, Conduent indicated that it provides printing/mailroom, document processing, payment integrity, and other back-office support services to the companies affected by the data breach. In the case of Volvo Group, the company told the Maine Attorney General that nearly 17,000 employees are affected. Volvo appears to have learned about the incident only in January 2026."

"Based on data breach notifications submitted by Conduent in October 2025 to attorney general's offices in various US states, the incident appeared to impact roughly 10 million individuals. However, recent updates shared by the company with AGs indicate that the data breach affects more than twice as many people as initially believed. For instance, in Texas the number of affected individuals has increased from 4 million to 15 million. In addition, more than 10 million people from Oregon are also affected."

Conduent detected a network intrusion on January 13, 2025, and determined attackers had access since October 21, 2024. Attackers obtained names, addresses, Social Security numbers, dates of birth, health insurance details, and medical data. The Safepay ransomware group claimed responsibility in February 2025. Conduent provides printing/mailroom, document processing, payment integrity, and other back-office services to several companies, including Volvo Group North America. Volvo told the Maine Attorney General that nearly 17,000 employees were affected and appears to have learned of the incident in January 2026. Initial October 2025 notifications estimated roughly 10 million individuals impacted; later updates to state attorneys general show totals more than doubling in some states, including Texas and Oregon.

Read at SecurityWeek