$17.5 Million Infosys McCamish Systems Settlement Aims to Resolve Data Breach Class Action Lawsuit [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

Infosys McCamish Systems has agreed to pay a $17.5 million settlement to wrap up six consolidated class action lawsuits over a major 2023 data breach that impacted more than six million people.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

In a letter dated March 14, 2025, Infosys McCamish Systems’ parent company, India-based Infosys Limited, notified three stock exchanges that it had reached an agreement in principle with the plaintiffs to settle their class action lawsuits. According to the notice, the proposed $17.5 million deal would end the consolidated complaint against Infosys McCamish Systems, and wrap up “a few” class action suits filed against the subsidiary’s customers.

“The proposed terms are subject to confirmation and due diligence by the plaintiffs, finalization of the terms of the settlement agreement, as well as preliminary and final court approval,” the letter states. “Once approved, the settlement will resolve all allegations made in the class action lawsuits without admission of any liability.”

ClassAction.org will update this page when more information about the Infosys McCamish Systems data breach settlement is available, including if and when the deal receive preliminary court approval and an official Infosys settlement website is launched.

The data breach lawsuit alleged that between October 29 and November 2, 2023, Infosys McCamish Systems’ “inadequately secured” computer systems were in encrypted with ransomware deployed by a cybercriminal gang known as LockBit.

The group was then able to steal sensitive information belonging to customers of Infosys’s clients, the complaint claimed. Infosys McCamish Systems offers platform-based insurance process management solutions to over 34 insurance companies, the suit noted.

Related Reading: Infosys McCamish Data Breach Lawsuit Says 6M People Impacted by Nov. 2023 Ransomware Attack

Infosys Limited disclosed in an April 2024 notice to stock exchanges that the Infosys McCamish Systems data breach impacted approximately 6.5 million people, exposing details such as emails, mailing addresses, phone numbers, birth dates, Social Security numbers, usernames, passwords, financial and customer account numbers, policy numbers, salaries and medical information.

Court documents state that the plaintiffs anticipate submitting a motion for preliminary settlement approval within 45 days of March 19, 2025.

 Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.