Volvo Group North America disclosed that it suffered an indirect data breach stemming from the compromise of IT systems at American business services giant Conduent, of which Volvo is a customer.

Volvo Group North America is the Swedish multinational's operating arm in the United States, Canada, and Mexico. It focuses on manufacturing commercial vehicles and heavy equipment, including trucks, buses, construction equipment, engines, and industrial power systems.

Mack Trucks, a very popular brand in the U.S., is one of its subsidiaries. Volvo Group is not the same as Volvo Cars, and does not manufacture passenger cars.

Nearly 17,000 customers of Volvo Group North America, along and/or company staff had their personal details exposed in a massive data breach that Conduent disclosed in late 2025.

Conduent is an American business process outsourcing (BPO) company that provides digital platforms and services for governments and enterprises.

The company suffered a security breach between October 21, 2024, and January 13, 2025, where threat actors stole full names, Social Security Numbers (SSNs), dates of birth, health insurance policy details, ID numbers, and medical information.

Conduent has not yet determined the exact number of impacted individuals, but has previously disclosed that it affects 10.5 million people in Oregon and another 15.5 million in Texas.

The company is now sending notifications on behalf of its customers to impacted parties, offering Volvo Group North America clients and staff free membership to identity monitoring services for at least a year, along with credit and dark web monitoring, and identity restoration.

Additionally, notification recipients are advised to consider placing fraud alerts or a security freeze on their credit reports.

Volvo Group North America has recently suffered a new data breach, also caused by a third-party supplier, exposing staff data such as full names and Social Security Numbers.

That breach was caused by a compromise at IT services supplier Miljödata in August 2025, which exposed the information of 1.5 million people, including Volvo Group employees in Sweden and in the U.S.

In 2021, Volvo Cars suffered a security breach where hackers stole research and development (R&D) data from its servers. That attack was claimed by the ‘Snatch’ data extortion group, which leaked the stolen files on their extortion portal.