Bank of America blames Infosys’ US unit for data leak of 57,000 clients

BENGALURU: Bank of America – one of Infosys’s key customers – has named Infosys McCamish Systems as the source of a data breach that has affected 57,028 customers.
McCamish Systems, a subsidiary of Infosys BPM, was impacted by a cybersecurity incident in Nov last year that resulted in non-availability of certain applications and systems in it. Infosys McCamish is a platform-based BPO firm that provides services to the financial services sector supporting life insurance, annuity products and retirement plans.It is also a software reseller for industry-specific clients. McCamish was acquired by Infosys BPM (formerly Infosys BPO) in 2009.
“On or around Nov 3, 2023, IMS was impacted by a cybersecurity event when an unauthorised third party accessed IMS systems, resulting in the non-availability of certain IMS applications. On Nov 24, 2023, IMS told Bank of America that data concerning deferred compensation plans serviced by Bank of America may have been compromised. Bank of America’s systems were not compromised,” said the notice sent to BofA’s customers.
The letter said the deferred compensation plan information may have included customers’ first & last names, address, business email, date of birth, social security number, and other information.