Infosys McCamish Systems ransomware attack affected more than 6 million people

In October–November 2023, Infosys McCamish Systems (IMS) suffered a LockBit 3.0 ransomware attack that encrypted systems between October 29 and November 2, ultimately impacting 6,078,263 individuals; LockBit claimed to have locked 2,000 computers after IMS allegedly offered $50,000. IMS notified regulators (e.g., Maine and California) on its own behalf and for impacted organizations including Oceanview Life and Bank of America (~57,000 customers), reporting exposure of sensitive data such as Social Security numbers, dates of birth, medical/health and biometric data, credentials, driver’s license/state IDs, financial and payment card information, passports, tribal IDs, and U.S. military IDs.