Archive · 22 Aug 2026
Cognizant Warns Customers of Potential Personal Data Exposure
Cognizant, a large technology company, said a cyberattack may have exposed some customers’ personal information.
The incident reportedly happened on April 21, 2026.
The information may have included Social Security numbers.
Cognizant said it has not found proof that anyone misused the information.
It notified people so they could take precautions.
Customers can freeze their credit reports for free.
They can also receive two years of monitoring and identity-theft help through IDX.
Reports said a group called CoinbaseCartel claimed responsibility, but Cognizant did not confirm that claim.
The company did not say how many people may have been affected.
Cognizant said a data breach occurred on April 21, 2026, potentially exposing Social Security numbers and other personal information.
The company notified affected individuals as a precaution and said it found no credible evidence that the information had been misused.
The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on August 18, nearly four months after it occurred.
Media reports citing Claim Depot said the cybercrime group CoinbaseCartel claimed responsibility, though Cognizant did not identify a perpetrator.
Cognizant offered free credit freezes, police-report guidance, and 24 months of IDX monitoring, recovery support, and up to $1 million in insurance reimbursement.
- Who
- Cognizant notified potentially affected customers; media reports attributed a responsibility claim to CoinbaseCartel.
- What
- A cyber breach may have exposed Social Security numbers and other personal information.
- When
- The breach reportedly occurred on April 21, 2026, and was reported to Massachusetts authorities on August 18; customer notifications followed.
- Where
- The incident involved Cognizant, a US-headquartered company based in New Jersey, and was reported to Massachusetts authorities.
- Why
- Cognizant said it notified customers as a precaution, despite finding no evidence that the information had been misused.
Cognizant’s Position
Reported Exposure Concerns
Potential data misuse
Cognizant’s Position
Cognizant said it had no reason to believe the potentially exposed information had been misused and described the notification as precautionary.
Reported Exposure Concerns
The reported exposure of Social Security numbers and other personal information creates a potential identity-theft concern for affected individuals, even though misuse has not been established.
Responsibility for the breach
Cognizant’s Position
Cognizant’s customer notification did not identify a perpetrator or confirm who was responsible.
Reported Exposure Concerns
Media reports citing Claim Depot said the cybercrime group CoinbaseCartel claimed responsibility, but that claim was not confirmed by Cognizant in the articles.
Timing and scope
Cognizant’s Position
Cognizant provided monitoring, recovery assistance, and insurance reimbursement but did not disclose how many individuals were affected.
Reported Exposure Concerns
One report said the incident was reported to Massachusetts authorities nearly four months after the breach, while the full scope of the potential exposure remains undisclosed.
- Company
- Cognizant
- Reported breach date
- April 21, 2026
- Regulatory report date
- August 18, nearly four months after the reported breach
- Potentially exposed information
- Social Security numbers and other personal information
- Affected individuals
- Cognizant did not disclose the number of people affected
- Customer assistance
- Free credit freezes, police-report guidance, and identity-theft protection services through IDX
- Protection package
- 24 months of credit and CyberScan monitoring, managed identity-theft recovery, and up to $1 million in insurance reimbursement
