Infosys Limited has reached an agreement to settle six class action lawsuits in the US over a 2023 data breach. The breach occurred at Infosys’ subsidiary, McCamish, which provides insurance solutions. McCamish revealed the incident in November 2023, confirming that customer data was compromised in a cyberattack but providing limited details.
In early 2024, Bank of America and Fidelity Investments Life Insurance Company informed individuals that their personal information had been stolen.
McCamish’s investigation, assisted by a third-party e-discovery vendor, later found that approximately 6.5 million individuals were affected. The company continued to update affected parties and assured them that remediation efforts were underway.
By January 2025, McCamish announced that it had successfully remediated and restored the affected systems and applications by the end of 2023. The class action lawsuits were consolidated, and the parties agreed to pursue resolution through mediation.
On November 7, 2024, a consolidated class action complaint was filed on behalf of individuals whose personal information was compromised.
Last week, McCamish informed the SEC and the National Stock Exchange of India that an agreement was reached with the plaintiffs. The company will pay $17.5 million to settle the lawsuits, which include claims against McCamish and its clients. The terms are still subject to confirmation, due diligence, and court approval before finalization.
