$17.5M Infosys McCamish Data Breach Class Action Settlement

$17.5M Infosys McCamish Data Breach Class Action Settlement

By Steve Levine

Infosys McCamish data breach class action settlement details

Updated: October 13, 2025

Claim Form Deadline: December 1, 2025

Payout: Up to $6,000

Proof required: Yes


You may be part of a new $17.5 million class action settlement reached with Infosys McCamish Systems, LLC over allegations that the company failed to safeguard personal information during a 2023 ransomware data breach.

The Infosys class action lawsuit says that data breach notice to potential victims was late or deficient. Infosys McCamish denies wrongdoing and agreed to settle to avoid further litigation.

If you received an official notice letter about the data breach from Infosys McCamish or one of its partner companies, you are likely included in the Settlement Class and may be eligible to file a claim.

What is the Total Settlement Amount?

$17,500,000 non-reversionary fund covering class payments, credit monitoring, notice and administration, attorneys’ fees and expenses, and service awards.

Who is Infosys?

Infosys McCamish Systems, LLC is a U.S.-based subsidiary of Infosys BPM, which is part of Infosys Limited — the large global technology and consulting company headquartered in India. Infosys acquired McCamish Systems in 2009. The subsidiary operates primarily in Atlanta, Georgia, providing insurance and retirement platform services to major financial institutions.

How Do I Qualify For a Payout?

You live in the United States and your personal information was compromised in the October 29 to November 2, 2023 breach. If you received an individualized notice, you are in the Settlement Class. Estimated class size is about 3.7 million.

How Much Can I Get Paid?


• Up to $6,000 for documented monetary losses fairly traceable to the breach
Two years of credit monitoring with at least one bureau and $1 million identity theft insurance
Residual Cash Payment estimated at about $30 per person, capped at $599, pro rata

What is the Claim Form Deadline?

December 1, 2025.

What are the Important Dates?


Opt Out Deadline: November 3, 2025
Objection Deadline: November 3, 2025
Final Approval Hearing: December 18, 2025 at 10:00 a.m. ET
Claim Deadline: December 1, 2025

When is the class action settlement payment date?

Payments will be sent after final approval and after any appeals are resolved.

What Happened in the Infosys Data Breach?

In late October 2023, Infosys McCamish Systems, a U.S.-based subsidiary of Infosys Limited, suffered a major ransomware attack that exposed the personal information of millions of individuals. The breach occurred between October 29 and November 2, 2023, when cybercriminals infiltrated the company’s servers and encrypted sensitive files. The group known as LockBit later claimed responsibility for the attack.

How Many People Were Affected?

The breach impacted approximately 6.5 million individuals across the United States, including customers and partners of financial and insurance companies that relied on Infosys McCamish’s administrative services. The exposed data included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account details, policy information, and in some cases, health-related data.

Why Was a Class Action Filed?

Following the disclosure, multiple lawsuits were filed alleging that Infosys McCamish failed to implement reasonable data security measures, leaving sensitive information vulnerable to cyberattacks. Plaintiffs claimed the company was negligent in safeguarding personal data and failed to promptly notify victims, increasing their risk of identity theft and fraud. The lawsuits were later consolidated into a nationwide class action.

Has the Case Been Settled?

In March 2025, Infosys McCamish Systems agreed in principle to pay $17.5 million to resolve the consolidated data breach lawsuits. The proposed settlement is subject to court approval and would provide monetary relief to impacted individuals without Infosys admitting wrongdoing. The company has also entered into a consent order with the Vermont Department of Financial Regulation, agreeing to pay an additional $125,000 penalty for delays in its breach notification process.

What Data Was Exposed?

The stolen data varied by individual but may have included full names, mailing and email addresses, birth dates, Social Security numbers, driver’s license or ID numbers, policy numbers, financial account details, and limited health information. Victims were advised to monitor their accounts closely and enroll in the complimentary credit monitoring offered as part of the company’s response.

Is Proof Required to File a Claim?

No documentation is required for the residual cash payment or credit monitoring. Documentation is required for reimbursement of monetary losses up to $6,000. Third party records are needed. Self prepared notes alone are not enough.

How Do I File a Claim?

File online or by mail with the official administrator.

Submit Claim


How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:


Official Notice

Your browser does not support viewing PDFs inline. Download the PDF.



Sources

Official Settlement Website
Notice and FAQs

OpenClassActions.com is a consumer news site and is not a settlement administrator or a law firm.



Settlement Summary
Status Proposed Settlement
Case McNally, et al. v. Infosys McCamish Sys., LLC, No. 1:24-cv-00995-JPB (N.D. Ga.)
Company Infosys McCamish Systems, LLC
Settlement Amount $17,500,000
Payout Up to $6,000 documented, residual about $30 cap $599
Proof Required Only for documented losses
Claim Deadline December 1, 2025
Opt Out Deadline November 3, 2025
Objection Deadline November 3, 2025
Final Hearing December 18, 2025, 10:00 a.m. ET
Admin Kroll Settlement Administration

Website(833) 621-8670
Submit Claim