Infosys & US Cyberattack Lawsuit Settlement: What We Know
Shiva Ganesh
The Cyberattack Incident – In November 2023, Infosys McCamish Systems experienced a ransomware attack, compromising sensitive data of up to 6.5 million individuals.
Data Compromised – The breach exposed personal information, including Social Security numbers, financial details, and medical records.
Legal Actions Initiated – Multiple class action lawsuits were filed, alleging negligence in safeguarding personal data.
Settlement Agreement – In March 2025, Infosys agreed to a $17.5 million settlement to resolve all pending lawsuits without admitting liability.
Strengthening Cybersecurity – Post-incident, Infosys implemented enhanced security measures to protect against future threats.