Paxton Targets Blue Cross, Conduent in 4M Texan Data Breach

AUSTIN, TX – Attorney General Ken Paxton is turning up the heat on Blue Cross Blue Shield of Texas (BCBS) and Conduent Business Services LLC, issuing sweeping demands for information as his office investigates what is being described as potentially the largest data breach in U.S. history. The breach, impacting an estimated four million Texans, exposed sensitive personal and protected health information, including data belonging to Texas Medicaid recipients.

Paxton’s office served Civil Investigative Demands (CIDs) to both BCBS and Conduent, compelling the companies to hand over documents and evidence related to the security lapse. The breach itself occurred between October 21, 2024, and January 13, 2025, with an unauthorized third party gaining access to the compromised systems. The scale of the data exposed is staggering, raising serious questions about the security protocols in place at both companies.

“The Conduent data breach was likely the largest breach in U.S. history,” Paxton stated bluntly. “If any insurance giant cut corners or has information that could help us prevent breaches like this in the future, I will work to uncover it.” The Attorney General’s office isn’t just looking at *how* the breach happened, but also whether negligence played a role. The investigation will scrutinize BCBS’s compliance with state laws designed to protect confidential information.

The focus isn’t solely on BCBS, however. Conduent’s security measures are under intense examination. Investigators are demanding full transparency regarding the company’s internal communications, security protocols, and adherence to Texas legal requirements. Sources within the Attorney General’s office suggest Paxton is prepared to pursue aggressive legal action if evidence of wrongdoing is uncovered. This isn’t a simple slap on the wrist investigation; Paxton is signaling a full-scale assault on any party found responsible.

BCBS was one of multiple entities affected when Conduent’s systems were compromised. While Conduent handled data processing for BCBS, the Attorney General is determined to ascertain whether BCBS itself took adequate steps to safeguard its customers’ information. The investigation will determine if BCBS relied too heavily on Conduent’s security measures without implementing sufficient internal controls. This is about accountability across the board.

“Texans deserve to know that their private health information is being handled responsibly and in full compliance with the law,” Paxton emphasized. “My office is committed to uncovering exactly what went wrong, taking action to protect Texas families, and ensuring there is justice for any negligence.” The Grimy Times will continue to follow this developing story, digging deeper into the details and exposing any attempts to conceal the truth. Expect more revelations as Paxton’s investigation unfolds – this is a case that could set a new precedent for data security accountability.