Conduent call center cyberattack exposes Georgia SNAP vulnerabilities
ATLANTA, GEORGIA — A cyberattack targeting Conduent’s Electronic Benefit Transfer (EBT) call center system has disrupted Georgia’s food assistance program, raising alarms over potential SNAP recipient data exposure.
The breach coincides with the state reporting $23 million in suspected SNAP fraud this year, intensifying scrutiny on third-party vulnerabilities in benefit distribution systems.
Conduent recently ranked #33 in the OA500 2025, an objective index of the world’s top 500 outsourcing companies.
Cyberattack exposes gaps in EBT security
A bot-driven cyberattack disrupted Georgia’s EBT call center recently, forcing the state to shut down services temporarily.
A spokesperson said, “Conduent’s EBT IVR faced a cyberattack where it appears bots forced a disruption in service and attempted to improperly access accounts. At our request, Conduent deployed interim security measures. Conduent has an investigation underway, and we await their findings.”
The Interactive Voice Response (IVR) system, used by recipients to check balances and card status, experienced an unusual spike in calls consistent with algorithmic attacks that exploit system vulnerabilities.
This incident follows a Congressional report warning about EBT card vulnerabilities, particularly skimming and bot attacks that harvest PINs and balance data. With Conduent operating similar systems in 37 states, the breach raises concerns about nationwide SNAP security.
This incident underscores the urgency for upgraded protections, including microchip technology absent from current EBT cards.
Third-party risks in critical benefit systems
Due to the sensitivity of the issue, Conduent, which operates Georgia’s ConnectEBT platform and IVR services, is under investigation and scrutiny regarding the reaction to the attack and possible client data loss.
The incident highlights systemic risks of outsourcing essential services: Conduent’s IVR, marketed as a fraud-prevention tool, became the attack vector itself. With federal reimbursement programs for stolen benefits now expired, low-income families bear the brunt of such failures.
Conduent released a statement and took accountability, stating, “Such attempts are often experienced in a call center environment and Conduent, at the State of Georgia’s request, took steps to block suspicious activity. We will continue to monitor the situation closely. Conduent values its partnership with the State of Georgia and is committed to delivering benefits to those individuals and families who need them.”
Push for proactive protections amid rising fraud
Despite its launch in December 2024, Georgia’s ConnectEBT app continues to experience low adoption, offering card-locking features to prevent unauthorized use.
Only 6% of households actively use the tool, despite DHS campaigns to promote it. The app allows geographic restrictions and auto-lock timers—critical defenses against the skimming schemes draining accounts in seconds. Reactive measures like PIN changes and locking are insufficient without systemic defense upgrades.
As bot attacks grow more sophisticated, they must push for proactive measures; otherwise, Georgia’s fraud losses this year may be a harbinger for other states’ reliance on outdated systems.
