Cyberattack against Sedgwick’s federal contractor subsidiary confirmed

Global claims administration and risk management firm Sedgwick has disclosed a cyberattack impacting subsidiary Sedgwick Government Solutions, which caters to the Department of Homeland Security, the Cybersecurity and Infrastructure Security Agency, and other federal agencies, after it was claimed to have been compromised by the TridentLocker ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

No other systems or data had been affected by the incident, according to Sedgwick, which noted the immediate activation of incident response protocols and the separation of its federal contractor subsidiary from its main network.

"Further, there is no evidence of access to claims management servers nor any impact on Sedgwick Government Solutions' ability to continue serving its clients," said a Sedgwick spokesperson. TridentLocker, which had touted the theft of 3.4 GB of data from Sedgwick Government Solutions in a New Year's Eve post, has already breached a dozen organizations since its emergence in November.

Such targeting of a federal contractor was reminiscent of the sweeping 2024 breach at leading U.S. business services provider Conduent, which impacted over 10 million individuals.