Conduent details data breach settlement in principle
Conduent reaches an agreement in principle to settle consolidated data-breach litigation and does not expect a material financial impact.
Rhea-AI Filing Summary
CONDUENT Inc (CNDT) reported that Conduent Incorporated and Conduent Business Services, LLC are defendants in U.S. lawsuits related to individuals who received notification letters after a January 2025 cybersecurity incident. Substantially all suits have been consolidated in the U.S. District Court for the District of New Jersey as In re: Conduent Business Services Data Breach Litigation.
The company denies the plaintiffs’ allegations but reached an agreement in principle to settle the consolidated case in August 2026, which was disclosed in a joint status report filed with the court on September 10, 2026. The settlement documentation is not finalized and remains subject to court approval, whose timing is uncertain. Conduent states that it maintains cyber insurance and does not expect the settlement to have a material impact on its financial position, results of operations, or cash flows.
Positive
- None.
Negative
- None.
Insights
Analyzing...
8-K Event Classification
Item 8.01 — Other Events
1 item
Item 8.01
Other Events
Other
Voluntary disclosure of events the company deems important to shareholders but not covered by other items.
Key Figures
Cybersecurity incident date: January 2025
Agreement in principle date: August 2026
Court filing date for status report: September 10, 2026
3 metrics
Cybersecurity incident date
January 2025
Date of the previously disclosed cybersecurity incident underlying the litigation
Agreement in principle date
August 2026
Month and year Conduent reached an agreement in principle to settle the consolidated case
Court filing date for status report
September 10, 2026
Date the parties disclosed the agreement in principle in a joint status report
Key Terms
cybersecurity incident, agreement in principle, consolidated case, cyber insurance
4 terms
cybersecurity incident technical
"our previously disclosed cybersecurity incident that took place in January 2025"
A cybersecurity incident is an event where someone's computer systems or data are attacked or broken into without permission. It matters because it can lead to stolen information, financial loss, or disruptions in services, similar to a break-in at a store that damages property or steals valuable items.
agreement in principle regulatory
"the Company reached an agreement in principle to settle the consolidated case"
consolidated case regulatory
"Substantially all of these lawsuits have been consolidated into one single action"
cyber insurance financial
"The Company maintains cyber insurance and does not expect the settlement"
A type of insurance policy that helps cover the financial impact when a company suffers a cyber incident — for example theft of customer data, ransomware attacks, or system outages. It pays for costs like recovering systems, legal fees, customer notifications, and lost sales, acting like homeowner’s insurance but for a company’s digital operations. Investors care because coverage and cost affect a company’s risk of large unexpected losses, reputation damage, and future cash flow.
FAQ
AI-generated questions and answers. How Rhea-AI works. Not financial advice.
What legal issue did CNDT disclose in this 8-K filing?
CNDT disclosed that Conduent Incorporated and Conduent Business Services, LLC are defendants in U.S. lawsuits brought by individuals who received notification letters after a January 2025 cybersecurity incident, with substantially all cases consolidated in the District of New Jersey.
What settlement did CNDT reach regarding the data breach litigation?
Conduent reached an agreement in principle to settle the consolidated data breach litigation in August 2026. This agreement in principle was disclosed in a joint status report filed with the U.S. District Court for the District of New Jersey on September 10, 2026.
Is the Conduent (CNDT) data breach settlement final and approved by the court?
No. Conduent states that the settlement paperwork is not yet finalized and the settlement agreement has not yet been approved by the court. The timing of final court approval cannot be predicted because it depends on factors outside the company’s control.
How does CNDT expect the settlement to affect its financials?
Conduent states that it maintains cyber insurance and does not expect the settlement to have a material impact on its financial position, results of operations, or cash flows, based on current information.
What is Conduent’s position on the plaintiffs’ allegations in the data breach case?
Conduent states that it denies the plaintiffs’ allegations and believes it has strong defenses to the claims, but agreed in principle to settle the consolidated case to avoid the costs and burdens of litigation.
AI-generated analysis. How Rhea-AI works. Not financial advice.
UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 8-K
CURRENT REPORT
Pursuant to Section 13 or 15(d)
of the Securities Exchange Act of 1934
Date of Report (date of earliest event reported): September 10, 2026
(Exact name of registrant as specified in its charter)
| (State or other jurisdiction of incorporation or organization) | (Commission File Number) | (IRS Employer Identification No.) | ||||||||||||
| (Address of principal executive offices) (Zip Code) | ||||||||
Registrant’s telephone number, including area code: (844 ) 663-2638
Not Applicable
(Former name or former address, if changed since last report)
Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):
| Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425) | |||||
| Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12) | |||||
| Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b)) | |||||
| Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)) | |||||
Securities registered pursuant to Section 12(b) of the Act:
| Title of each class | Trading Symbol(s) | Name of each exchange on which registered | ||||||
Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (CFR 230.405) or Rule 12b-2 of the Securities Exchange Act of 1934 (CFR 240.12b-2).
Emerging Growth Company ☐
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
Item 8.01. Other Events.
Conduent Incorporated and Conduent Business Services, LLC (collectively, the "Company") are parties to several lawsuits in the U.S. asserted by or on behalf of individuals who allegedly received a notification letter that their personal information may have been affected by our previously disclosed cybersecurity incident that took place in January 2025. Substantially all of these lawsuits have been consolidated into one single action in the U.S. District Court, District of New Jersey (In re: Conduent Business Services Data Breach Litigation). The Company denies plaintiffs' allegations and believes that it has strong defenses to plaintiffs' claims. Nevertheless, to avoid the costs and burdens of litigation, in August 2026, the Company reached an agreement in principle to settle the consolidated case, which the parties disclosed in a joint status report filed with the Court on September 10, 2026. The settlement paperwork is not yet finalized, and the settlement agreement has not yet been approved by the court. The timing of the final court approval of the settlement agreement cannot be predicted with certainty as it will depend on a number of factors outside of the Company's control. The Company maintains cyber insurance and does not expect the settlement to have a material impact on its financial position, results of operations or cash flows.
SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, Registrant has duly authorized this report to be signed on its behalf by the undersigned duly authorized.
Date: September 10, 2026
| CONDUENT INCORPORATED | ||||||||||||||
| By: | /s/ Anna Novoseletsky | |||||||||||||
| Anna Novoseletsky | ||||||||||||||
| Executive Vice President, General Counsel and Secretary | ||||||||||||||