Infosys subsidiary named as source of Bank of America data leak

Infosys McCamish Systems disclosed a cybersecurity incident that exposed personal data for 57,028 individuals tied to Bank of America deferred compensation plans — potentially including names, addresses, business emails, dates of birth, Social Security numbers, and account details. The breach was reported as an external system compromise; Bank of America stated its own systems were not breached. An allegation tied the incident to the LockBit ransomware group, though attribution remains unconfirmed, and affected individuals were offered identity-protection services.