Massive Data Breach at Conduent Exposes Volvo Group Employee Information

A significant data breach at Conduent, a business services provider, has compromised the personal information of nearly 17,000 employees of Volvo Group North America. The breach, which has now affected an estimated 25 million individuals across various sectors, was initially detected on January 13, 2025, but the hackers had access to Conduent's systems from October 21, 2024, to January 13, 2025. The Safepay ransomware group has claimed responsibility for this cyberattack, alleging that they stole multiple terabytes of sensitive data.

Automotive Giant Volvo Employee Information Exposed via Third-Party Conduent Data BreachVolvo Group hit in massive Conduent data breachConduent Breach Hits Volvo Group: Nearly 17,000 Employees’ Data ExposedThe Register UK

Volvo Group North America confirmed that the breach exposed personal data, including names, Social Security numbers, dates of birth, and health information of 16,991 employees. The company learned of the breach in late January 2026, more than a year after the initial intrusion. Conduent's notification to the Maine Attorney General indicated that the breach's impact was more extensive than previously reported, with Texas seeing an increase in affected individuals from 4 million to 15 million, and over 10 million in Oregon.

Volvo Group hit in massive Conduent data breachConduent Breach Hits Volvo Group: Nearly 17,000 Employees’ Data ExposedAutomotive Giant Volvo Employee Information Exposed via Third-Party Conduent Data BreachThe Register UK

Conduent has stated that it discovered the intrusion in January 2025 and subsequently engaged forensic investigators to assess the situation. The company has offered free identity protection services to those affected. In its communications, Conduent emphasized that there is currently no evidence of misuse of the compromised data. However, the prolonged access by attackers raises concerns about the potential for future exploitation of the stolen information.

The Register UK

The Conduent breach is part of a larger trend of third-party data breaches affecting numerous organizations. Conduent's role in managing sensitive data for various government and corporate clients means that the ramifications of this breach could extend far beyond Volvo Group. The incident highlights vulnerabilities in supply chain security, as attackers increasingly target service providers to maximize their impact.

The Register UK

Critics have raised concerns about the delayed notification of affected individuals, which can hinder timely protective measures. The breach at Conduent is not an isolated incident for Volvo Group; the company previously faced a similar situation in September 2025 when a ransomware attack on Swedish IT firm Miljödata exposed employee data. This pattern of breaches underscores the need for enhanced security protocols among third-party service providers.

Conduent Breach Hits Volvo Group: Nearly 17,000 Employees’ Data Exposed

• “While we are unaware of any attempted or actual misuse of any information involved in this incident, we are providing you with information about the incident and steps you can take to protect yourself, should you feel it necessary.” — Conduent Business Services, LLC

Volvo Group hit in massive Conduent data breach

As investigations continue, regulatory bodies are likely to scrutinize Conduent's security practices and the broader implications of the breach. Companies are urged to reassess their partnerships with third-party service providers to mitigate risks associated with data breaches.

The Register UK