Conduent Ransomware Breach Exposes Millions; NAIC Sets 2026 Tech and Cybersecurity Goals

In this episode, we delve into a significant ransomware attack on Conduent, a major government technology provider, which has compromised sensitive data of tens of millions across multiple U.S. states. Initially thought to be limited, the breach now affects 15.4 million individuals in Texas and 10.5 million in Oregon, with further impacts in Delaware, Massachusetts, and New Hampshire. The stolen data includes Social Security numbers, medical information, and health insurance details, raising concerns about identity theft and fraud. The Safeway ransomware gang claims responsibility for the theft of over 8 terabytes of data. Conduent is actively notifying affected individuals and collaborating with law enforcement. We also cover the National Association of Insurance Commissioners' (NAIC) strategic priorities for 2026, focusing on disaster preparedness and responsible technology use. NAIC President Scott A. White highlights the organization's dedication to regulating the insurance industry and protecting consumers. Key initiatives include enhancing capital frameworks, improving data architecture, and increasing resilience through regulation and partnerships. The NAIC aims to lead in AI model governance and cybersecurity, supporting state regulators in managing emerging technology risks through new frameworks, AI evaluation tools, and expanded expertise. More information on our fractional COO services: www.wsquareadvisory.com Take your resilience to the next level with Resilis: www.resilis.com More information on our fractional COO services: www.wsquareadvisory.com Take your resilience to the next level with Resilis: www.resilis.com More information on our fractional COO services: www.wsquareadvisory.com Take your resilience to the next level with Resilis: www.resilis.com 📚 Sources: https://www.kennedyslaw.com/en/thought-leadership/case-review/2026/australian-securities-and-investments-commission-v-fiig-securities-limited-civil-penalties-for-financial-service-licence-holder-with-inadequate-cybersecurity/ https://www.infosecurity-magazine.com/news/fca-updates-incident-thirdparty/ https://thenextweb.com/news/dora-compliance-european-financial-firms-not-ready https://www.forbes.com/sites/daraabasiita/2026/03/07/bond-investors-may-be-underpricing-cyber-risk-as-ai-speeds-up-attacks/