$17.5M Infosys McCamish Data Breach Class Action Settlement
By Steve Levine
Updated: October 13, 2025
Claim Form Deadline: December 1, 2025
Payout: Up to $6,000
Proof required: Yes
You may be part of a new $17.5 million class action settlement reached with Infosys McCamish Systems, LLC over allegations that the company failed to safeguard personal information during a 2023 ransomware data breach.
The Infosys class action lawsuit says that data breach notice to potential victims was late or deficient. Infosys McCamish denies wrongdoing and agreed to settle to avoid further litigation.
If you received an official notice letter about the data breach from Infosys McCamish or one of its partner companies, you are likely included in the Settlement Class and may be eligible to file a claim.
What is the Total Settlement Amount?
$17,500,000 non-reversionary fund covering class payments, credit monitoring, notice and administration, attorneys’ fees and expenses, and service awards.Who is Infosys?
Infosys McCamish Systems, LLC is a U.S.-based subsidiary of Infosys BPM, which is part of Infosys Limited — the large global technology and consulting company headquartered in India. Infosys acquired McCamish Systems in 2009. The subsidiary operates primarily in Atlanta, Georgia, providing insurance and retirement platform services to major financial institutions.How Do I Qualify For a Payout?
You live in the United States and your personal information was compromised in the October 29 to November 2, 2023 breach. If you received an individualized notice, you are in the Settlement Class. Estimated class size is about 3.7 million.How Much Can I Get Paid?
• Up to $6,000 for documented monetary losses fairly traceable to the breach
• Two years of credit monitoring with at least one bureau and $1 million identity theft insurance
• Residual Cash Payment estimated at about $30 per person, capped at $599, pro rata
What is the Claim Form Deadline?
December 1, 2025.What are the Important Dates?
• Opt Out Deadline: November 3, 2025
• Objection Deadline: November 3, 2025
• Final Approval Hearing: December 18, 2025 at 10:00 a.m. ET
• Claim Deadline: December 1, 2025
When is the class action settlement payment date?
Payments will be sent after final approval and after any appeals are resolved.What Happened in the Infosys Data Breach?
In late October 2023, Infosys McCamish Systems, a U.S.-based subsidiary of Infosys Limited, suffered a major ransomware attack that exposed the personal information of millions of individuals. The breach occurred between October 29 and November 2, 2023, when cybercriminals infiltrated the company’s servers and encrypted sensitive files. The group known as LockBit later claimed responsibility for the attack.How Many People Were Affected?
The breach impacted approximately 6.5 million individuals across the United States, including customers and partners of financial and insurance companies that relied on Infosys McCamish’s administrative services. The exposed data included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account details, policy information, and in some cases, health-related data.Why Was a Class Action Filed?
Following the disclosure, multiple lawsuits were filed alleging that Infosys McCamish failed to implement reasonable data security measures, leaving sensitive information vulnerable to cyberattacks. Plaintiffs claimed the company was negligent in safeguarding personal data and failed to promptly notify victims, increasing their risk of identity theft and fraud. The lawsuits were later consolidated into a nationwide class action.Has the Case Been Settled?
In March 2025, Infosys McCamish Systems agreed in principle to pay $17.5 million to resolve the consolidated data breach lawsuits. The proposed settlement is subject to court approval and would provide monetary relief to impacted individuals without Infosys admitting wrongdoing. The company has also entered into a consent order with the Vermont Department of Financial Regulation, agreeing to pay an additional $125,000 penalty for delays in its breach notification process.What Data Was Exposed?
The stolen data varied by individual but may have included full names, mailing and email addresses, birth dates, Social Security numbers, driver’s license or ID numbers, policy numbers, financial account details, and limited health information. Victims were advised to monitor their accounts closely and enroll in the complimentary credit monitoring offered as part of the company’s response.Is Proof Required to File a Claim?
No documentation is required for the residual cash payment or credit monitoring. Documentation is required for reimbursement of monetary losses up to $6,000. Third party records are needed. Self prepared notes alone are not enough.How Do I File a Claim?
File online or by mail with the official administrator.Submit Claim
How Do I Find Class Action Settlements?
Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:Official Notice
Sources
• Official Settlement Website• Notice and FAQs
OpenClassActions.com is a consumer news site and is not a settlement administrator or a law firm.
RoundUp Cancer Lawsuits: How to Qualify
Status: Open to Claims
Submit Claim
Pickleball Class Action Settlement
Payout: $150 - $300
Submit Claim
$30M YouTube Privacy Settlement
Deadline: January 21, 2026
Submit Claim| Settlement Summary | |
| Status | Proposed Settlement |
|---|---|
| Case | McNally, et al. v. Infosys McCamish Sys., LLC, No. 1:24-cv-00995-JPB (N.D. Ga.) |
| Company | Infosys McCamish Systems, LLC |
| Settlement Amount | $17,500,000 |
| Payout | Up to $6,000 documented, residual about $30 cap $599 |
| Proof Required | Only for documented losses |
| Claim Deadline | December 1, 2025 |
| Opt Out Deadline | November 3, 2025 |
| Objection Deadline | November 3, 2025 |
| Final Hearing | December 18, 2025, 10:00 a.m. ET |
| Admin |
Kroll Settlement Administration
Website • (833) 621-8670 |
| Submit Claim | |