Data breach at Infosys’ arm affected 6 million people

BENGALURU: Infosys McCamish Systems (IMS) data breach has affected over 6 million people, data from the office of the Maine Attorney General showed. Last week, IMS provided written notice of the compromise to impacted individuals, which includes Maine residents. About 11,866 Maine residents were impacted due to the data breach. IMS also provided substitute notice of the incident on June 27.The information compromised varies by individual but includes some or all of the details -- social security number, date of birth, medical treatment/record information, biometric data, email address and password, username and password, driver’s license number or state ID number, financial account information, payment card information, passport number, tribal ID number, and US military ID number.
An email sent to Infosys did not elicit a response till the time of going to press.
On November 4, many security chroniclers reported that the LockBit ransomware gang took responsibility for the attack. In February, one of Infosys’s key customers -- Bank of America (BofA) -- named IMS as the source of a data breach that affected 57,028 customers. McCamish Systems, a subsidiary of Infosys BPM, was impacted by a cybersecurity incident in November last year that resulted in the non-availability of certain applications and systems in McCamish. Infosys McCamish is a platform-based BPO firm that provides services to the financial services sector supporting life insurance and annuity products and retirement plans. It’s also a software reseller for industry-specific clients. McCamish was acquired by Infosys BPM (formerly Infosys BPO) in 2009.
McCamish said that its in-depth cyber forensic investigation determined that unauthorized activity occurred between October 29, 2023, and November 2, 2023. It initiated its incident response and engaged cybersecurity and other specialists to assist in its investigation of and response to the incident, and in the remediation and restoration of impacted applications. With the assistance of external specialists, McCamish substantially remediated and restored the affected applications and systems.