Infosys McCamish Systems infosys.com Infosys McCamish Systems data breach: what happened and what to do
Infosys McCamish Systems, a life insurance and retirement software vendor, said an attack that began on October 29, 2023 affected about 6.08 million people. Reports list Social Security numbers, financial account details and, for some, medical and biometric data.
View all 13,115 breaches- Breach date
- 29 Oct 2023
- Affected
- 6,078,263
- Data exposed
- Social security numbers, Driver's licenses, Financial account information, Passport numbers, Email addresses, Passwords, Dates of birth, Medical information, Biometric data
- Last updated
Infosys McCamish Systems (IMS) sells software and services to life insurers, annuity providers and retirement plan administrators. In 2024 it told regulators that an attack on its systems affected people whose data its clients held. An amended filing with the Maine Attorney General listed 6,078,263 people in total.
What happened
According to press reports of the company's filings, a threat actor first got into IMS systems on October 29, 2023, and the company discovered the incident on November 2, 2023. The attack is believed to have been carried out by the LockBit ransomware group. Notification letters went out around June 2024, months after the attack, which is why many people only learned about it that summer.
Who was affected
Most people affected never dealt with IMS directly. They were customers of IMS's clients. T. Rowe Price Retirement Plan Services was one, and IMS earlier alerted about 57,000 Bank of America customers. If you have a life insurance policy, annuity or workplace retirement plan, your provider may have used IMS.
What was exposed
Reports list Social Security numbers, driver's license numbers, financial account information, passport numbers, email addresses and passwords, dates of birth, medical treatment information and biometric data. The mix differs from person to person, so read your own letter.
Identity numbers plus a date of birth are what thieves use to open credit or file false claims in your name. Where a password leaked, they will also try it on other accounts.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion so nobody can open new credit in your name. Then check your reports at annualcreditreport.com. The FTC explains how freezes work.
- 2
Change any password you shared with this service
If your notice mentions a password, change it everywhere you used it, and turn on two-factor login.
- 3
Take the free credit monitoring if it's offered
Read your notice letter for the monitoring offer and its enrollment deadline. It alerts you to new credit activity but doesn't stop it, so pair it with a freeze.
- 4
Check your financial accounts
Review statements for your insurance policy, annuity or retirement plan. Call the provider if anything looks wrong.
- 5
Expect scams that mention the breach
Emails, texts and calls that quote real details about you, or offer help with the breach, are a common follow-up. Don't click links in them. Go to the company's own site or phone number instead.
- 6
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web for your details and alerts you when they show up in a new leak.
Frequently asked
Was I affected by the Infosys McCamish Systems breach?
If you hold a life insurance policy, annuity or retirement plan with a company that used IMS, you may have been. Affected people were notified by letter.
What was exposed?
Reports list Social Security numbers, driver's license numbers, financial account information, passport numbers, email addresses and passwords, dates of birth, medical treatment information and biometric data. It varies by person.
How many people were affected?
6,078,263 people in total, according to an amended filing with the Maine Attorney General as reported by the press.
Should I change my password?
If your letter says a password was involved, yes, and change it anywhere you reused it.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
