What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Infosys McCamish Systems LLC, an Infosys subsidiary, has paid $17.5 million to settle consolidated class-action claims tied to a ransomware incident discovered in November 2023. A federal court granted final approval on December 18, 2025, and Infosys later reported that the settlement had become effective and had been paid.
The ordinary claim deadline was December 1, 2025, so the settlement is not generally open for new claims. Anyone checking a prior claim or a notice should use only the official settlement website and administrator contact information.
As an Amazon Associate I earn from qualifying purchases.
What happened to the Infosys data-breach settlement?
The settling entity was Infosys McCamish Systems LLC, which is part of Infosys BPM and ultimately Infosys Limited. The $17.5 million agreement resolved consolidated litigation over a 2023 ransomware incident and seven related lawsuits filed against McCamish customers. The settlement resolved allegations without an admission of liability.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsThe case is McNally et al. v. Infosys McCamish Systems, LLC, Case No. 1:24-cv-00995-JPB, in the U.S. District Court for the Northern District of Georgia. Final approval was granted on December 18, 2025. Infosys subsequently disclosed that the settlement had become effective and that the settlement amount had been paid. (Infosys SEC filing)
#1 Best Overall
Can you still file an Infosys McCamish settlement claim?
Not through the ordinary claims process. The claim-form deadline was December 1, 2025. The opt-out and objection deadline was November 3, 2025, and the final-approval hearing took place on December 18, 2025.
The official settlement website lists the deadline as passed. If you submitted a claim, keep your confirmation and rely on communications from the authorized administrator. If you believe you received a notice but are unsure about your status, contact the administrator through the official website rather than responding to an unsolicited email, text message or phone call.
Official Infosys McCamish settlement website
What happened in the 2023 ransomware incident?
On November 2, 2023, McCamish became aware that certain systems had been encrypted by ransomware. Infosys said the incident temporarily made some systems and applications unavailable. McCamish engaged outside cybersecurity and other specialists to investigate, contain and remediate the incident and restore affected applications.
Recommended Free Tools
The affected applications were substantially remediated and restored by December 31, 2023. The investigation later identified personal information that was subject to unauthorized access and exfiltration. That does not mean every affected person experienced identity theft, financial loss or confirmed misuse of their information.
The initial public disclosure was made on November 3, 2023. Multiple lawsuits were later filed in the Northern District of Georgia, and a consolidated class-action complaint was filed on November 7, 2024. (Company disclosure)
Whose information may have been involved?
McCamish processes personal information for corporate customers in the insurance and investment sectors. As a result, some people may have received a breach notice from an insurance company, financial-services provider or another McCamish customer rather than directly from Infosys.
Rank #3
The settlement website says potentially compromised information varied by person and could have included:
- Names and addresses
- Social Security numbers and dates of birth
- Insurance policy or account numbers
- Financial-account information
- Driver’s-license or state-identification numbers
- Passport and other government-identification information
- Medical, prescription, diagnosis, treatment and laboratory information
- Usernames, passwords, payment-card and account-access information
- Employment, salary, gender and customer-identification information
These categories were not necessarily exposed for every individual. Your individualized breach notice, rather than a general list, is the best source for determining what information applied to you. (Official settlement FAQ)
How many people received breach notices?
The official settlement FAQ identifies approximately 3.7 million people who received individualized statutory breach notices. Some secondary reports have cited larger estimates, but those figures should not be treated as the official settlement-class count without a specific supporting court filing. The 3.7 million figure is the clearest number stated in the official settlement materials.
What did the $17.5 million settlement provide?
The $17.5 million was the gross settlement fund. It was not an automatic $17.5 million payment divided equally among everyone who received a notice, and receiving a notice alone did not guarantee a payment.
| Benefit | Amount or scope | Important condition |
|---|---|---|
| Documented monetary losses | Up to $6,000 per settlement-class member | Required qualifying, unreimbursed losses and supporting documentation |
| Credit monitoring | Two years | Included monitoring from at least one credit bureau and $1 million in identity-theft insurance protections |
| Residual cash payment | Estimated at approximately $30; maximum $599 per person | Depended on the number and value of approved claims and the remaining settlement fund |
The approximately $30 figure was an estimate, not a guaranteed payment. Likewise, $6,000 was a ceiling for qualifying documented losses, not the standard award for every claimant. Valid and timely claim forms were generally required to receive settlement benefits. (Settlement benefits and eligibility)
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →How the litigation unfolded
- November 2, 2023: McCamish became aware that certain systems had been encrypted by ransomware.
- December 31, 2023: Affected applications had been substantially remediated and restored.
- March 6 to July 25, 2024: Six actions were filed against McCamish in the Northern District of Georgia.
- November 7, 2024: The consolidated class-action complaint was filed.
- December 20, 2024: The court stayed the proceedings while the parties pursued mediation.
- March 13, 2025: The parties reached an agreement in principle after mediation.
- May 9, 2025: The definitive settlement agreement was entered.
- July 16, 2025: The court granted preliminary approval.
- December 1, 2025: The claim-form deadline passed.
- December 18, 2025: The court granted final approval.
- By March 31, 2026: Infosys reported that the settlement had become effective and had been paid.
Settlement documents and court materials
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What final approval does—and does not—mean
Final approval makes the settlement binding under its terms and resolves the covered claims. It does not mean a court found that Infosys or McCamish admitted wrongdoing. The agreement included a no-admission provision.
Best Value
It is also important to distinguish the settlement defendant from the broader Infosys corporate group. The named settling entity was Infosys McCamish Systems LLC; the headline uses “Infosys” because McCamish is part of the Infosys organization.
How much did Infosys actually bear?
Infosys previously disclosed a $17.5 million settlement accrual and a $17 million insurance reimbursement receivable. The insurance receivable was offset against settlement expense in the statement of comprehensive income.
That accounting disclosure provides useful context but does not mean the settlement cost the company exactly $500,000. Infosys also said additional costs, indemnity obligations or claims could not be determined. The insurance reimbursement likewise did not reduce the $17.5 million fund available under the settlement agreement. (2025 filing)
What affected people should do now
- Check your original notice. Identify which company sent it and what categories of information were listed.
- Verify any settlement communication. Use infosysdatasettlement.com rather than links in unsolicited messages.
- If you filed a claim, keep your confirmation. Do not pay a fee to receive a settlement payment or to “reactivate” a claim.
- Protect your accounts. Change passwords that were reused elsewhere and enable multifactor authentication where available.
- Consider a credit freeze or fraud alert. These can make it harder for someone to open new credit in your name.
- Respond to suspected identity theft quickly. Contact the affected bank, insurer or card issuer and report fraudulent activity through appropriate government or financial channels.
The official website identifies Kroll Settlement Administration LLC as the administrator and lists the case telephone number as (833) 621-8670. Verify contact details on the official website before sharing personal information.
Bottom line
The Infosys McCamish settlement is no longer merely proposed: it received final approval on December 18, 2025, and Infosys reported that it was paid. The gross fund was $17.5 million, but individual benefits depended on valid, timely claims and could include documented-loss reimbursement, credit monitoring or a variable residual payment. The ordinary claim deadline—December 1, 2025—has passed, so use only the authorized settlement website or administrator for any remaining status questions.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
