On **November 2, 2023**, Infosys McCamish Systems, LLC fell victim to a **ransomware attack** that encrypted critical systems, compromising personal information of individuals. The exposed data included **names**, though the exact number of affected individuals remains undisclosed. The incident was formally reported to the **California Office of the Attorney General** on **July 19, 2024**, nearly eight months after the breach occurred. The delay in disclosure raises concerns about the company’s incident response timeline and potential risks to affected parties, such as identity theft or phishing attempts targeting the leaked personal details. While the full scope of the attack—including whether additional sensitive data (e.g., financial records, Social Security numbers) was accessed—has not been confirmed, the encryption of systems suggests operational disruptions. Ransomware attacks of this nature often involve threats of data exfiltration or permanent encryption unless a ransom is paid, though the report does not specify whether such demands were made or met.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-588924
TPRM report: https://www.rankiteo.com/company/mccamish-systems-an-infosys-company
"id": "mcc019091825",
"linkid": "mccamish-systems-an-infosys-company",
"type": "Ransomware",
"date": "11/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'unknown',
'name': 'Infosys McCamish Systems, LLC',
'type': 'company'}],
'data_breach': {'data_encryption': 'yes (ransomware encryption)',
'number_of_records_exposed': 'unknown',
'personally_identifiable_information': 'yes (names)',
'sensitivity_of_data': 'moderate (personal identifiers)',
'type_of_data_compromised': ['personal information (names)']},
'date_detected': '2023-11-02',
'date_publicly_disclosed': '2024-07-19',
'description': 'The California Office of the Attorney General reported that '
'Infosys McCamish Systems, LLC experienced a ransomware '
'incident that encrypted certain systems on November 2, 2023. '
'The breach affected personal information, including names, of '
'individuals; however, the specific number of individuals '
'affected is unknown.',
'impact': {'data_compromised': ['personal information (including names)'],
'identity_theft_risk': 'potential (personal information exposed)',
'systems_affected': 'certain systems (encrypted)'},
'ransomware': {'data_encryption': 'yes'},
'references': [{'date_accessed': '2024-07-19',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'California Office of '
'the Attorney General '
'(reported on '
'2024-07-19)'},
'title': 'Ransomware Incident at Infosys McCamish Systems, LLC',
'type': 'ransomware'}