Conduent Services, a third-party “back-office support” service provider, has notified Blue Cross Blue Shield patients of a major data leak containing their highly sensitive information — including Social Security numbers.
“We are writing to inform you about a recent incident experienced by Conduent that may have involved some of your personal information, which came into our possession due to the services we provide to Blue Cross Blue Shield of Texas,” the company told patients in an Oct. 24 letter.
While the company said it’s “unaware” of any attempted or actual misuse of patient data, Conduent still provided customers with a list of cautionary measures they can take to protect themselves “should [they] feel it necessary.”
In January, Conduent faced a “cyber incident” that impacted some of its network — prompting an investigation.
“Our investigation determined an unauthorized third party had access to our environment from October 21, 2024 to January 13, 2025, and obtained some files associated with Blue Cross Blue Shield,” the company said.
“We are providing you with this notice upon the recent conclusion of this time-sensitive data analysis, as your personal information was contained in the affected files,” the company said
- Read more: Major pharmacy chain to pay $37.7M for over prescribing drugs, fraud
Affected information includes patients’ date of birth, addresses and Social Security numbers.
The company is offering affected individuals 24 months of credit monitoring and identity restoration services free of charge.
What can you do?
Conduent includes a list of steps BCBS patients can take to monitor their personal information, including:
- 24 months of identity monitoring through Kroll: You can visit enroll.kroll.com/redeem and enter your activation code, found on your notification letter, as well as the attached ID. You must enroll by March 2026 to use the service free of charge.
- Free credit report: Under U.S. law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus: Equifax, Experian and TransUnion. You can request your report at annualcreditreport.com by calling 877-322-8228.
- Place a fraud alert: A fraud alert tells creditors to contact you before opening a new account or changing existing accounts. To place an alert, you can call any one of the three major credit reporting agencies. The first alert is active for 90 days. You can renew it again after the first 90 days are up.
With identity monitoring services through Kroll, patients can also receive credit monitoring alerts, access to fraud consultation and access to identity restoration specialists if identity fraud issues arise.
