Cognizant Technology Solutions

Profile narrative

Cognizant Technology Solutions, also known simply as Cognizant, is a major information technology services company headquartered in the United States. Operating in the IT services sector, the company serves a broad client base spanning multiple industries and global markets, providing technology and business services that include support for enterprise operations and digital infrastructure. Based on publicly reported incidents, the company's work involves handling sensitive client data and supporting critical operational systems, placing it within the ecosystem of large-scale IT service providers that manage both corporate and consumer information for other organizations.

The company has experienced multiple significant cybersecurity incidents that highlight its scale and the nature of its operations. In April 2020, the company was targeted by the Maze Ransomware group in an attack that caused service disruptions for clients. The attackers compromised internal systems, and the company subsequently distributed indicators of compromise, including malicious IP addresses and file hashes associated with Maze payloads. The intrusion involved an extended network presence that enabled lateral movement and credential theft before ransomware deployment. The Maze operators, known for exfiltrating unencrypted data prior to encryption, pressured victims with threats of public data leaks. In May 2023, Cognizant was named among the victims of the Cl0p ransomware group, which exploited a zero-day vulnerability in Progress Software's MOVEit file transfer application. The group claimed to have stolen data from hundreds of organizations and began listing victims who refused to pay on its leak site. Cognizant was among the named entities, alongside other major technology and industrial companies.

More recently, in April 2026, Cognizant notified individuals of a data breach in which a threat-actor group claimed responsibility on a dark-web forum. The company stated it had no reason to believe the compromised information was misused and offered affected persons identity-theft protection through IDX, including credit and CyberScan monitoring, a one-million-dollar insurance reimbursement policy, and recovery services. It also advised monitoring accounts, placing fraud alerts or security freezes, and noted the right to obtain a police report under Massachusetts law. Separately, an earlier subsidiary breach reportedly exposed data of approximately 3.4 million individuals, possibly including protected health information. Across these incidents, the organization's responses have involved internal security teams, external cyber defense firms, and coordination with law enforcement, reflecting the operational complexities associated with incident response at a company of its scale.

Incidents

3 incidents linked to this organisation.