Cognizant Data Breach Exposes Personal Information in Cyber-Extortion Attack
New Jersey-based AI and IT services company Cognizant, headquartered in Teaneck, suffered a data breach around April 21, with the incident reported to affected users on August 18. The breach, claimed by the cyber-extortion group CoinbaseCartel, potentially exposed sensitive personal data, including Social Security numbers.
In a notification letter, Cognizant stated there was no evidence of misuse but advised impacted individuals to take precautions. The company offered 24 months of credit monitoring and a $1 million identity theft insurance policy through IDX, a data breach recovery firm. Customers were also directed to place a security freeze on their credit reports via Equifax, Experian, and TransUnion.
IDX representatives, available Monday through Friday (9 a.m.–9 p.m.), were assigned to assist affected users. While Cognizant emphasized that no misuse had been detected, the breach underscores the ongoing risks of cyber-extortion targeting corporate data.
Source: https://www.northjersey.com/story/news/2026/08/20/ai-company-cognizant-nj-data-breach/91392527007/
Cognizant cybersecurity rating report: https://www.rankiteo.com/company/cognizant
"id": "COG1787432998",
"linkid": "cognizant",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Affected users (number not '
'specified)',
'industry': 'AI and IT Services',
'location': 'Teaneck, New Jersey, USA',
'name': 'Cognizant',
'type': 'Corporation'}],
'customer_advisories': 'Notification letter sent to affected users with '
'precautionary measures.',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal information, Social '
'Security numbers'},
'date_detected': '2023-04-21',
'date_publicly_disclosed': '2023-08-18',
'description': 'New Jersey-based AI and IT services company Cognizant '
'suffered a data breach around April 21, claimed by the '
'cyber-extortion group CoinbaseCartel, potentially exposing '
'sensitive personal data, including Social Security numbers. '
'The incident was reported to affected users on August 18.',
'impact': {'data_compromised': 'Personal information, including Social '
'Security numbers',
'identity_theft_risk': 'High'},
'motivation': 'Cyber-Extortion',
'recommendations': 'Affected individuals advised to place a security freeze '
'on credit reports via Equifax, Experian, and TransUnion; '
'offered 24 months of credit monitoring and $1 million '
'identity theft insurance policy.',
'references': [{'source': 'Cognizant Notification Letter'}],
'response': {'communication_strategy': 'Notification letter to affected users',
'third_party_assistance': 'IDX (data breach recovery firm)'},
'threat_actor': 'CoinbaseCartel',
'title': 'Cognizant Data Breach Exposes Personal Information in '
'Cyber-Extortion Attack',
'type': 'Data Breach'}