Infosys, the Indian IT services behemoth, has agreed to a $17.5 million settlement to resolve class action lawsuits stemming from a 2023 cyber incident involving its U.S. subsidiary, Infosys McCamish Systems. The breach, disclosed in November 2023, led to the unavailability of certain applications and systems. Subsequent investigations revealed unauthorized access and exfiltration of data affecting up to 6.5 million individuals.
Compromised data encompassed sensitive information such as Social Security numbers, dates of birth, medical records, biometric data, email addresses, passwords, driver’s license numbers, payment card details, financial account information, tribal ID numbers, passport numbers, and U.S. military ID numbers.
The breach’s extensive reach prompted multiple class action lawsuits throughout 2024, culminating in this recent settlement.
Infosys’s decision to settle underscores the escalating challenges corporations face in safeguarding data amid rising cyber threats. This incident serves as a stark reminder of the critical importance of robust cybersecurity measures to protect both organizational assets and individual privacy.