Volvo Group Data Breach: Two Vendor Hacks, No Lawsuit Against Volvo
Reference Guide
If you got a letter from Volvo Group North America — the truck, bus and equipment maker behind Mack Trucks, not Volvo Cars — your data was taken from a supplier, not from Volvo. The bigger incident is the Conduent hack: 16,991 people tied to Volvo Group. As of October 2026 no lawsuit names Volvo Group over either breach. The only case that can pay Volvo-linked people is the one against Conduent.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened, and When
There are two separate Volvo Group data breach incidents, both at outside vendors.
Conduent (the large one). Conduent runs printing, mailroom, document processing and payment work for many companies. Intruders were inside its network from October 21, 2024 until it detected them on January 13, 2025. Stolen files included names, addresses, Social Security numbers, dates of birth, health insurance data and medical information; Volvo's letter says names were exposed and other fields vary by person. Volvo Group North America lists January 21, 2026 as the date it confirmed its people were affected — a full year after the intrusion was spotted — and reported 16,991 people across the US to the Maine Attorney General, three of them in Maine.
Miljödata (the smaller one). A Swedish HR software supplier was hit by ransomware on August 20, 2025. It confirmed on September 2, 2025 that Volvo Group personnel data was involved: first and last names with Social Security numbers. Volvo filed its notice letter with the Massachusetts Attorney General but did not publish a count.
Case details
No lawsuit against Volvo Group. As of October 15, 2026 we found no class action naming Volvo Group as a defendant over either breach. The Conduent breach is litigated against Conduent: more than 35 federal class actions are consolidated as In re: Conduent Business Services Data Breach Litigation, No. 2:25-cv-16953, in the U.S. District Court for the District of New Jersey. Conduent denies the allegations. In a filing with the SEC on September 10, 2026, it said it reached an agreement in principle in August 2026 to settle that consolidated case; the paperwork was not final and no court had approved it. Separately, the Texas Attorney General announced an investigation of Conduent on February 12, 2026. Full details of that case are on our Conduent data breach settlement page.
Status: No Volvo Case, Conduent Deal Not Yet Approved
For the Miljödata letters: no lawsuit and no settlement that we could find. The remedy offered was free identity protection.
Am I Affected?
The test is your mail. Volvo Group North America's Conduent letters went to current and former employees and some customers — the letter may come from Conduent on Volvo's behalf. Conduent said it expected all its consumer notices out by April 15, 2026.
The Miljödata letters went to Volvo Group North America employees and associates, with enrollment by email and a welcome letter.
Owning or driving a Volvo car does not make you part of this. Volvo Cars is a different company, and its own older incident involved stolen R&D files, not customer records. Keep any letter you got: it is your proof of membership if the Conduent settlement is approved.
Is There Money?
Volvo Group Data Breach Timeline
October 21, 2024 — Conduent Access Begins
Intruders get into Conduent's network, where files linked to employees' current or former health plans are stored.
January 13, 2025 — Conduent Detects It
Conduent spots the intrusion and brings in forensic investigators. Volvo is not yet told its people are involved.
August 20, 2025 — Miljödata Ransomware
A separate attack hits the Swedish HR supplier. On September 2, 2025 it confirms Volvo Group names and Social Security numbers were taken.
January 21, 2026 — Volvo Confirms Conduent Exposure
Volvo Group North America confirms 16,991 people were affected and reports to the Maine Attorney General.
September 10, 2026 — Conduent Deal in Principle
Conduent tells the SEC it agreed in August to settle the consolidated New Jersey case, pending court approval.
October 2026 — No Volvo Lawsuit, No Claim Form
No suit names Volvo Group. The Conduent settlement has no approval, no administrator and no deadline yet.
Three Things to Watch For
A letter that mixes a big brand with a vendor nobody has heard of is easy to imitate:
“Volvo settlement” claim pages
There is no Volvo settlement. A site asking for your Social Security number to “claim your Volvo payment” is collecting data, not filing anything.
Calls posing as Volvo HR or benefits
The stolen Conduent files were tied to health plans, so a caller may sound like your benefits office. Volvo and Conduent will not phone to ask for your full Social Security number or a fee to keep monitoring active.
Fake monitoring enrollment links
The Miljödata offer was enrolled through an email and a welcome letter. Only use the activation code printed in your own letter, and type the provider's web address yourself instead of clicking a link.
Volvo Group Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Volvo Group data breach lawsuit?
Not against Volvo. As of October 15, 2026 we found no class action naming Volvo Group as a defendant. The Conduent breach is litigated against Conduent in the District of New Jersey, No. 2:25-cv-16953, and that case covers people whose data Conduent held for Volvo.
How many people were affected?
Volvo Group North America reported 16,991 people across the US to the Maine Attorney General for the Conduent breach, three of them Maine residents. Volvo did not publish a number for the Miljödata incident.
What data was exposed?
In the Conduent breach, stolen files included names, addresses, Social Security numbers, dates of birth, health insurance data and medical information; Volvo's letter says the exact fields vary by person. In the Miljödata breach, names and Social Security numbers.
Why did Volvo wait a year to tell people?
The breach happened at Conduent, not Volvo. Conduent detected it January 13, 2025 and then reviewed the stolen files to work out whose data they held. Volvo lists January 21, 2026 as the date it confirmed its people were affected.
How much can I get from a data breach settlement?
From Volvo, nothing — there is no Volvo settlement. The Conduent settlement terms are not public and not approved, so no figure exists yet. Our data breach settlement calculator shows how comparable cases have paid.
Do I need to do anything now?
No sign-up exists. If the Conduent settlement is approved, notice comes from a court-appointed administrator. Do activate the free monitoring in your letter, freeze your credit at all three bureaus, and keep the letter.
Is this about Volvo Cars or my car?
No. Volvo Group makes trucks, buses and construction equipment and owns Mack Trucks; it is not Volvo Cars. This page does not cover vehicle recalls such as airbag recalls — check those by VIN with NHTSA or your dealer.
Is the Volvo or Conduent letter real?
Conduent sent letters on behalf of its clients, including Volvo Group, and set up a dedicated call center. A real letter offers free monitoring and asks for no payment. Call the number printed in it, not one from an email or text.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Conduent Data Breach SettlementThe vendor case that covers the Volvo Group Conduent letters
- Data Breach Settlement CalculatorEstimate what breach settlements typically pay per person
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines
- Settlement Payout CalculatorHow fund size and claim rates shape individual payments