Personal Information May Have Been Exposed In April Breach
IT services giant Cognizant has begun notifying individuals whose personal information may have been exposed in a data breach that occurred on or around April 21, 2026.
The company has said it has no reason to believe that the affected information has been misused so far, but has decided to notify potentially impacted individuals as a precaution.
Cognizant is also offering affected people identity theft protection services, including insurance coverage of up to $1 million for eligible losses.
What Happened In The Cognizant Breach?
The incident reportedly took place on April 21, 2026.
Cognizant’s notification to affected individuals says that some personal information may have been exposed during the incident.
The company has not publicly disclosed the total number of people affected by the breach.
The notification comes several months after the reported incident, as Cognizant completed its investigation and began contacting individuals who may have been impacted.
Social Security Numbers Among The Data At Risk
Reports indicate that the potentially exposed information includes sensitive personal details, including Social Security numbers.
Other personal information may also have been involved.
The exposure of Social Security numbers is particularly concerning because such information can potentially be used for identity theft, fraudulent financial activity and other forms of impersonation.
Cognizant has nevertheless stated that it has no reason to believe the information has been misused.
Cognizant Offers $1 Million Protection
As part of its response, Cognizant is offering affected individuals identity theft protection services through IDX.
The package includes 24 months of credit and CyberScan monitoring.
It also includes an insurance reimbursement policy of up to $1 million, along with managed identity theft recovery services.
The protection is intended to help affected individuals detect and respond to fraudulent activity if their personal information is subsequently misused.
What Does The $1 Million Cover Actually Mean?
The $1 million figure does not mean that every affected individual will automatically receive $1 million.
Instead, it refers to the maximum insurance reimbursement available under the identity protection programme for eligible losses.
The coverage is intended to help with certain expenses associated with identity theft and recovery, subject to the terms and conditions of the programme.
This distinction is important because the headline figure represents insurance protection rather than a direct payment from Cognizant.
Cognizant Says There Is No Evidence Of Misuse
Despite notifying affected individuals, Cognizant says there is currently no evidence that the compromised information has been misused.
The company said it considered it prudent to inform potentially affected individuals so they could take precautionary measures.
This allows people to monitor their accounts and credit activity even if no fraudulent activity has yet been detected.
Customers Can Freeze Their Credit Reports
Cognizant is also advising affected individuals that they can place a security freeze on their credit reports.
A credit freeze restricts access to a person’s credit report and can make it more difficult for criminals to open new credit accounts using stolen personal information.
Affected individuals can also take other precautions, including monitoring financial accounts and watching for unexpected credit activity.
Cybercrime Group Reportedly Claims Responsibility
Media reports have linked the incident to a cybercrime group known as CoinbaseCartel, which reportedly claimed responsibility for the breach.
However, claims made by cybercrime groups should be treated cautiously unless independently verified.
Cognizant’s own notification confirms that a data security incident occurred and that personal information may have been exposed, but the company has not publicly attributed the incident to a specific attacker in its notification.
Why The Breach Is Significant
Cognizant is one of the world’s largest IT services companies and manages technology operations and sensitive information for organisations across multiple industries.
A breach involving an IT services provider can therefore have consequences beyond the company itself.
Personal information belonging to customers or other individuals can become a target for criminals because such information can potentially be used for identity theft and social engineering attacks.
The Company Has Apologised
Cognizant has expressed regret over the incident and the inconvenience it may cause affected individuals.
The company has encouraged people who receive notifications to contact the dedicated support service for additional information.
It is also providing instructions for accessing the identity protection programme.
What Affected Individuals Should Do
People who receive an official Cognizant breach notification should carefully review the information provided and follow the instructions included in the letter.
They should consider enrolling in the identity protection services offered by the company if eligible.
They should also monitor bank accounts, credit reports and other financial activity for anything unusual.
Unexpected loan applications, unfamiliar accounts, suspicious emails or messages requesting personal information should be treated cautiously.
This Is Not Cognizant’s First Data Security Incident
The latest incident also comes after a separate breach involving Cognizant’s TriZetto Provider Solutions business earlier in 2026.
That incident affected sensitive healthcare-related information belonging to millions of individuals.
The latest breach is separate and involves personal information potentially exposed in the April incident.
The two incidents highlight the growing cybersecurity challenges facing large technology and services organisations.
Why Identity Protection Is Becoming More Important
Data breaches increasingly expose information that cannot simply be replaced.
A stolen password can be changed.
A compromised credit card can be cancelled.
But information such as a person’s name, date of birth or Social Security number is much harder to replace.
That makes identity monitoring an important part of the response after a major data breach.
The Bigger Cybersecurity Lesson
The Cognizant incident highlights an uncomfortable reality of the digital economy.
Companies can invest heavily in cybersecurity and still face incidents in which sensitive information is potentially exposed.
The most important part of the response is therefore not only preventing attacks but also quickly identifying affected individuals, explaining what happened and providing meaningful assistance.
Cognizant’s offer of two years of identity monitoring and up to $1 million in eligible insurance coverage is designed to provide that additional layer of protection.
Cognizant Customers Are Now Being Asked To Stay Alert
For now, the company says there is no evidence that the exposed information has been misused.
But affected individuals should not interpret that as a reason to ignore the notification.
Identity theft can occur months or even years after personal information is stolen.
Regularly checking credit reports and financial accounts can help identify suspicious activity early.
The incident is another reminder that once sensitive personal information enters the digital ecosystem, protecting it requires constant vigilance.
Summary
Cognizant has notified individuals that their personal information may have been exposed in a data breach that occurred around April 21, 2026. Reports indicate that sensitive information, including Social Security numbers, may have been involved. The company says it has no reason to believe the information has been misused but is notifying affected individuals as a precaution. Cognizant is offering eligible people 24 months of identity theft protection through IDX, including credit and CyberScan monitoring, managed recovery services and insurance reimbursement coverage of up to $1 million. Affected individuals can also place security freezes on their credit reports and should monitor accounts for suspicious activity.
