Conduent
US business process outsourcing company serving governments and healthcare.
Conduent filed a voluntary 8-K on 10 September 2026 that referred back to its January 2025 cyber incident, in which a threat actor took files linked to a limited number of clients, and declared no new material incident.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Why is Conduent still filing about a January 2025 cyberattack?
Timeline for Conduent
Filed a cyber disclosure under Item 8.01
Cybersecurity: Threats and Defences: Astrana Health files 8-K over phone spoofBackground
Conduent is a US business process outsourcing company that runs back-office services for governments and healthcare clients. That position makes its own breaches a client problem: the data it holds belongs to the agencies and insurers it serves.
The company's defining cyber event began on 13 January 2025, when it suffered an operational disruption. Conduent disclosed it under Item 1.05 in 2025, the SEC form reserved for incidents a company judges material, and said the threat actor exfiltrated files associated with a limited number of its clients.
On 10 September 2026 Conduent filed again, this time under the voluntary Item 8.01, referring back to the January 2025 incident without declaring a new one. In that same September window Boston Scientific and Astrana Health filed under Item 1.05, while Conduent, CenterPoint Energy and Veradigm used the voluntary section.
