Court Rules
All enforcement actions
InvestigationLow Risk

TX AG Investigates Conduent for 4M Texan Health Data Breach

Conduent Business Services LLCFebruary 12, 2026Texas Attorney General

Summary

Texas Attorney General Ken Paxton issued Civil Investigative Demands to Blue Cross Blue Shield of Texas and Conduent Business Services LLC to investigate a data breach that exposed the protected health information of approximately four million Texans. The breach occurred from October 21, 2024, to January 13, 2025, and is considered the largest in U.S. history. The investigation focuses on compliance with Texas data protection laws and potential negligence.

Remedy

The entities must comply with the Civil Investigative Demands by providing documents and information regarding their data security measures, communications about the breach, and compliance with Texas law.

Reporting Requirements

Violation Types

Entity Details

Entity

Conduent Business Services LLC

Also known as: Conduent

Industry

Technology

Official Sources

Related Enforcement Actions

HHS

Conduent Business Services LLC

Conduent Business Services LLC (Business Associate, NJ) reported a HIPAA breach affecting 42,616 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

TX

Samsung Electronics America, Inc.

Texas Attorney General Ken Paxton reached an agreement with Samsung Electronics America, Inc. to stop collecting Automated Content Recognition (ACR) data from smart TVs without consumers' express consent. Samsung must update its smart TVs to provide clear and conspicuous disclosures and obtain consent before any data collection, ensuring Texans are informed and in control of their viewing data.

TX

Shein US Services LLC

Texas Attorney General Ken Paxton filed a lawsuit against Shein US Services LLC for selling toxic products and exposing consumers' personal data to the Chinese Communist Party. The lawsuit seeks monetary penalties under the Texas Deceptive Trade Practices Act. This action is part of a broader effort to protect Texans from health risks and CCP influence.

TX

PDD Holdings, Inc. and WhaleCo Inc.

Texas Attorney General Ken Paxton filed a lawsuit against Temu (PDD Holdings, Inc. and WhaleCo Inc.) for deceptive marketing practices and illegally harvesting Texans' personal data, which was then exposed to the Chinese Communist Party. The suit seeks monetary damages under the Texas Deceptive Trade Practices Act, with potential penalties of up to $10,000 per violation and higher for seniors. This is part of a broader effort to hold CCP-aligned companies accountable.

TX

TP-Link Systems Inc.

Texas Attorney General Ken Paxton filed a lawsuit against TP-Link Systems Inc. for deceptively marketing its networking devices and enabling the Chinese Communist Party to access American consumers' devices. The lawsuit alleges that TP Link's products have been used by PRC state-sponsored hackers and that the company is subject to Chinese laws requiring data disclosure. This is part of a coordinated effort to hold China-aligned companies accountable under Texas law.

TX

Blue Cross Blue Shield of Texas and Conduent Business Services LLC

Texas Attorney General Ken Paxton issued Civil Investigative Demands to Blue Cross Blue Shield of Texas and Conduent Business Services LLC as part of an investigation into a massive data breach at Conduent that exposed the protected health information of approximately four million Texans. The breach occurred between October 21, 2024 and January 13, 2025, affecting Texas Medicaid recipients and other residents. The AG's office is investigating the security failures and compliance with Texas law.