Conduent breach hits 25M in what Texas AG Paxton calls largest ever

Earlier this year, more than 25 million Americans began receiving letters from a company most had never heard of. The sender was Conduent Business Services, a contractor that processes benefits records and human resources data for state Medicaid programs, employer health plans and government agencies. Between October 2024 and January 2025, ransomware operators pulled names, Social Security numbers, dates of birth, home addresses, medical diagnosis codes, and health insurance claim numbers from Conduent’s systems. In February 2026, Texas Attorney General Ken Paxton called it the largest data breach in US history.

The letters ended, as most letters do, with an apology, a phone number, and an offer of free credit monitoring for a year. Once you run out of data, can you realistically protect your identity on your own, or has it become something most people are better off outsourcing?

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent safety alerts and special deals straight to your inbox.
• Visit CyberGuy.com for simple, real-world ways to spot scams early and stay protected. – Trusted by millions of people who watch CyberGuy on TV every day.

FAKE SSA EMAIL WARNING: DETECT THIS SCAM QUICKLY

Additionally, you will have instant access to my information. The Ultimate Scam Survival Guide It’s free when you join.

What you can do for free today

Federal law and the tools of the Federal Trade Commission cover more ground than many people realize. None of this costs anything. Used together, they close the most common entry points targeted by scammers.

1) Freeze your credit

Start by freezing your credit at all three bureaus. Freezing prevents new accounts from being opened in your name. It has been free on Equifax, Experian and TransUnion since 2018. You can temporarily remove it when you need to apply for a loan.

2) Get an IRS Identity Protection PIN

Then, get an Identity Protection PIN from the IRS at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. This six-digit code blocks fraudulent tax returns using your Social Security number. The IRS issues a new one every year.

3) Check your credit reports regularly

You should also check your credit reports regularly. Equifax, Experian and TransUnion now offer free weekly access through AnnualCreditReport.com. Checking every few months can help you catch suspicious activity early.

4) Use IdentityTheft.gov for recovery

It also helps you bookmark IdentityTheft.gov. The site creates a personalized recovery plan, generates the affidavit required by creditors, and provides pre-populated dispute letters.

5) Opting out of pre-screened loan offers

Another simple step is to opt out of pre-vetted loan offers. This removes you from email lists that lenders use for unsolicited loan and insurance offers. You can do this online at OptOutPrescreen at: optoutprescreen.comIt is managed by major credit bureaus. The process only takes a few minutes. Choose a five-year opt-out for a quick resolution, or print and mail the form for a permanent opt-out. Once the process is complete, you should see fewer “pre-approved” offers in your mailbox.

Free tools can help you protect your identity, but they often require time, effort, and constant attention. (Nastasic/Getty Images)

6) Turn on two-factor authentication

Finally, turn on two-factor authentication (2FA) for every financial, government, and welfare account. Even if someone steals your password, they won’t be able to access your account without the second factor.

For many people, these steps create a strong foundation.

When DIY ID tracking falls short

The do-it-yourself approach works until something goes wrong. This is where the difference becomes clear.

The average victim spent more than 200 hours and $1,343 out of pocket to recover from identity theft, according to the Identity Theft Resource Center’s 2025 Consumer Impact Report. About a fifth reported losses of over $100,000. Many also reported significant emotional distress.

The financial impact is growing rapidly nationally. A February 2026 report from the U.S. Senate Joint Economic Committee estimated that identity theft due to major data broker breaches has cost Americans more than $20 billion over the past decade. This forecast includes the likes of Equifax, Exactis, National Public Data and TransUnion.

Free tools also have clear limits. They will not monitor the dark web for your data or remove your personal information from data broker sites. They also can’t contact creditors or dispute fake accounts in your name.

Instead, you handle each step yourself. IdentityTheft.gov it gives you a road map, but you still have to make calls, file paperwork, and follow up over and over again.

SSA IDENTIFICATION SCAMS ARE GETTING MORE PERSONAL

What do paid identity protection services add?

Free tools alone leave real gaps for anyone whose data is compromised by a breach like Conduent or National Public Data. This is where paid identity protection services come into play.

These services constantly scan data brokers and contact search sites that resell your name, Social Security number, email, and bank accounts, as well as your home address and family ties, on the dark web. They send opt-out requests on your behalf and repeat the process when your information appears again. When fraud occurs, most services assign a case manager who works with credit bureaus, banks, and creditors to help resolve the problem.

Some plans also include identity theft insurance and specialized fraud resolution support, which can help cover certain losses and reduce recovery time.

Paid services have limits. No service can prevent every breach, and even the best monitoring will only help reduce recovery time. If you’re comfortable managing your own checklist, a DIY approach can still work. But for families, those who have suffered past violations, and those who want less hands-on intervention, adding a paid service alongside free protections can make the process easier to manage.

See my tips and top picks for Best Identity Theft Protection at CyberGuy.com

Paid identity protection services can help reduce the burden on you by monitoring, alerting and intervening when fraud occurs. (Nikolas Kokovlis/NurPhoto)

Kurt’s important takeaways

Most people can handle the basics of identity protection on their own, at least at first. Free tools cover the biggest risks and help prevent common types of fraud. But the situation changes when your data suffers a major breach. At this point, monitoring, cleaning, and tracking can become a long and frustrating process. This is where paid services can make a real difference. They reduce workload, monitor risks from more sources, and step in when fraud occurs. However, no service can completely eliminate risk. The decision depends on how much time you want to invest and how much support you’ll need if something goes wrong. For many households, a tiered approach works best. Start with free protections, then decide if adding a paid service is right for your situation.

If your identity was stolen tomorrow, would you have the time and patience to fix it yourself? Let us know by writing to us. CyberGuy.com

CLICK TO DOWNLOAD FOX NEWS APPLICATION

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent safety alerts and special deals straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit: CyberGuy.com – Trusted by millions of people who watch CyberGuy on TV every day.
• Additionally, you will have instant access to my information. The Ultimate Scam Survival Guide It’s free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.