Infosys McCamish gets final approval to settle class action lawsuits for $17.5 million
Infosys McCamish received final court approval to settle class action lawsuits for $17.5 million related to a data breach.Summary
Infosys announced that a U.S. court has granted final approval to a $17.5 million settlement resolving class action lawsuits against its subsidiary, Infosys McCamish Systems LLC. The lawsuits stemmed from a ransomware attack in late October and early November 2023, which resulted in the unauthorized access and exfiltration of sensitive data belonging to approximately 6 to 6.5 million U.S. insurance and retirement-plan customers.
The settlement fund will cover claims against McCamish and certain customers named in related class actions. Plaintiffs accused McCamish of inadequate security measures and delays in breach notification, leading to penalties from at least one U.S. state regulator. Infosys first disclosed these cases in November 2023 and has provided updates in its financial statements.
The settlement will become effective if no appeal is filed within 30 days of the December 18, 2025 order, fully resolving all allegations without any admission of wrongdoing by McCamish. Cybersecurity analysts report the breach exposed personal information, including names, addresses, Social Security numbers, and financial data.
(Source：THE WEEK)