Cognizant controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile12 entries
2026
Cognizant data breach notification and identity theft cover
Issue disclosure
Cognizant notified affected individuals of a data security breach that occurred around April 21, 2026, involving their personal information. The company did not specify the number of people affected or the nature of the information involved. Cognizant said it has no reason to believe the compromised information was misused, and offered 24 months of identity theft protection through IDX, including credit and CyberScan monitoring, a $1 million insurance reimbursement policy and managed identity theft recovery services.
Company response
Ongoing disclosure — Cognizant
Nasdaq-listed Cognizant has notified affected individuals of a data security breach that occurred around April 21 this year.
Refund or compensation — Cognizant
Cognizant offered affected individuals identity theft protection services through IDX for 24 months. The package includes credit and CyberScan monitoring, a $1 million insurance reimbursement policy and fully managed identity theft recovery services.
Ongoing disclosure — Cognizant
The Teaneck-headquartered company said in a notification to customers that it has “no reason to believe” the information was misused, but has decided to notify affected individuals.
Refund or compensation — Cognizant
It is offering them identity theft protection and up to $1 million in insurance coverage for
Source excerpt
In a notification letter, Cognizant’s US entity informed individuals about a breach involving their personal information and expressed regret over the incident.
Cognizant offered affected individuals identity theft protection services through IDX for 24 months. The package includes credit and CyberScan monitoring, a $1 million insurance reimbursement policy and fully managed identity theft recovery services.
Nasdaq-listed Cognizant has notified affected individuals of a data security breach that occurred around April 21 this year.
2026
Cognizant notifies customers of data breach from April 21, 2026
Issue disclosure
Cognizant notified customers of a data breach from April 21, 2026, that may have exposed personal information including Social Security numbers, stating there was no evidence of misuse so far. A cybercrime group, CoinbaseCartel, reportedly took responsibility. Cognizant offered identity theft protection services through IDX, including 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed ID theft recovery services.
Company response
Ongoing disclosure — Cognizant
Refund or compensation — Cognizant
However, the IT firm has also offered identity theft protection services through IDX, a data breach and recovery services expert. IDX identity protection services include: 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed ID theft recovery services.
Source excerpt
According to media reports, a cybercrime group CoinbaseCartel took responsibility for the data breach. The incident exposed Social Security numbers as well as other personal information.
However, the IT firm has also offered identity theft protection services through IDX, a data breach and recovery services expert. IDX identity protection services include: 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed ID theft recovery services.
2025
Cognizant and TriZetto Provider Solutions face class action lawsuits over data breach
Lawsuit filed
In December 2025, at least four class action lawsuits were filed against Cognizant Technology Solutions and its subsidiary TriZetto Provider Solutions in the United States District Court for the District of New Jersey and the Eastern District of Missouri. The suits allege that the companies failed to adequately protect sensitive patient data and failed to provide timely notifications following a cyberattack. The cyberattack allegedly breached TriZetto's network around November 2024 and was not identified until around October 2, 2025. The litigation concerns the data breach and related notification practices.
At least four class action lawsuits were filed in December 2025 against Cognizant Technology Solutions and its subsidiary TriZetto Provider Solutions in US district courts for the District of New Jersey and the Eastern District of Missouri, alleging failure to adequately protect sensitive patient data and failure to provide timely notifications after a cyberattack that allegedly breached TriZetto's network around November 2024 and was not identified until around October 2, 2025.
Company response
Denial — Cognizant
Because this matter involves ongoing litigation, we are unable to provide further comment at this time
Source excerpt
At least four lawsuits were filed in December against Cognizant and TriZetto Provider Solutions in the US district courts for the District of New Jersey and the Eastern District of Missouri.
An unauthorised third party allegedly breached TriZetto’s network system around November 2024 and accessed private information, which the company did not identify until on or around October 2, 2025, nearly a year after the breach.
The core allegations claim that TPS failed to adequately protect the impacted people’s data and did not provide timely notifications after a cyberattack.
2021
Cognizant enters proposed $95 million shareholder settlement
Settlement
Cognizant said it had entered into a proposed $95 million settlement to resolve a US securities class action brought by investors. The settlement is subject to a judge's approval, and Cognizant said it is not an admission of liability. The suit relates to allegations that former executives authorized an unlawful payment to Indian government officials to obtain a building permit.
Stated objective. to resolve a securities class action suit
Company response
Denial — Cognizant
This agreement is not an admission of liability by Cognizant, but is rather to eliminate the uncertainty, burden, and expense of further protracted litigation
Source excerpt
Cognizant has entered into a settlement to resolve a securities class action suit.
IT services provider Cognizant has sought preliminary approval from a New Jersey district judge to settle a class action suit for $95 million
This agreement is not an admission of liability by Cognizant, but is rather to eliminate the uncertainty, burden, and expense of further protracted litigation
2021
US court allows visa-program lawsuit against Cognizant to proceed
Ruling
A US court refused to dismiss a False Claims Act lawsuit against Cognizant. A former executive alleged the company used L-1 and B-1 visas for workers performing work requiring H-1B visas. The judge found the allegations plausibly sufficient to allege a knowing violation; the article also reports the judge said Cognizant had not violated tax laws and could potentially be violating immigration laws.
Source excerpt
A US court has refused to dismiss a lawsuit against Cognizant for defrauding the federal government's worker visa programme.
The internal email correspondence submitted by Franchitti is plausibly sufficient to allege that Cognizant committed this violation knowingly.
The company had argued that the FCA did not apply to records and statements made under the US Internal Revenue Code.
2020
Cognizant confirms Maze ransomware attack
Issue disclosure
Cognizant confirmed that a security incident involving its internal systems and causing service disruptions for some clients resulted from a Maze ransomware attack. The article states that the status of the attack was unknown at the time and does not establish that data was exfiltrated.
Company response
Remediation — Cognizant
It added that its internal security teams, supplemented by leading cyber defense firms, are actively taking steps to contain this incident.
Source excerpt
Maze is particularly nasty because it is known to exfiltrate the data before encrypting the data, but it is unknown at the present time the status of the attack on Cognizant.
Cognizant stated on its website that it “can confirm that a security incident involving our internal systems, and causing service disruptions for some of our clients, is the result of a Maze ransomware attack.”
Wednesday, April 22, 2020
2020
Facebook content moderators file class-action lawsuit
Lawsuit filed
More than 3,000 U.S. employees who worked as Facebook content moderators through Cognizant filed a class-action lawsuit naming Facebook and Cognizant as defendants. The plaintiffs allege that reviewing harmful content caused psychological trauma and PTSD, and seek $5 million in compensation.
Source excerpt
据外媒最新消息，日前，3000多名在印度外包巨头高知特（Cognizant）公司担任Facebook内容审核员的美国员工发起了一宗集体诉讼，Facebook和高知特被列为被告方，这些内容审核员要求对这份工作引发的精神损害进行经济补偿。
据报道，这些原告指出，他们长期帮助Facebook进行审核用户有害内容的工作，这引发了心理创伤以及创伤后应激障碍（PTSD），他们要求Facebook和高知特公司提供500万美元的赔偿。
2018
Indian dividend-distribution-tax dispute
Indian tax authorities alleged that Cognizant had not paid a substantial dividend-distribution tax amount. Litigation followed, and the company challenged further enforcement.
2018
Employment discrimination litigation
Former employees alleged discrimination, unfavorable performance treatment, and replacement by less-qualified Indian workers. A 2024 retrial jury found against Cognizant and awarded damages.
2018
Working-conditions criticism in Ireland
Press reports raised concerns about conditions and compensation for contractors working on Cognizant's Dublin outsourcing work for Google.
2017
Performance-review and layoff complaints
Employees in India complained that performance reviews were used to force resignations. Labor authorities reportedly closed one matter in favor of the employees and advised that they receive another opportunity to demonstrate performance.
2016
Foreign Corrupt Practices Act investigation
Cognizant disclosed cooperation with U.S. authorities and an internal investigation concerning possible improper payments in India. The disclosure was accompanied by the resignation of president Gordon Coburn.