HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

Infosys McCamish Systems, LLC

bd_04fc985587b1141f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 2, 2023

Filed

Apr 2, 2024

To disclose

22 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Global Atlantic Financial Group LLC notified Montana residents of a cybersecurity incident at third-party administrator Infosys McCamish Systems, LLC. Unauthorized access occurred around Nov 2, 2023. McCamish disabled systems, engaged forensic and e-discovery firms, and restored services. Potential exposure of policyholder PII (SSN, DOB, contact info) is under investigation. Kroll provides 24 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 152 days

Nov 2, 2023

Begins

Nov 2, 2023

Discovered

Apr 2, 2024

Filed

vs. sector median

+14 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Part of INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_ad8157afe13e09b22024-04-02Verified by operator
New Hampshire State AGbd_1dae5b339104422d2024-04-01 · +1dVerified by operator
Massachusetts State AGbd_7271e42e0d71dd882024-03-29 · +4dVerified

Name: The Global Atlantic Financial Group LLC
norm: the global atlantic financial
Domain: globalatlantic.com

Name: Infosys McCamish Systems, LLC
norm: infosys mccamish systems
Domain: globalatlantic.com
Industry: Financial Servicesllm

Discovered: Nov 2, 2023
Breach occurred: Nov 2, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via Infosys McCamish Systems, LLC
Initial access: valid_credentials

During the incident: McCamish immediately disabled systems
Retained a third-party forensics firm to investigate and assist with its recovery plan
Restored services with additional security controls
Retained a third-party e-discovery firm to investigate potential impact to consumer data
Secured the services of Kroll to provide identity monitoring at no cost to you for 24 months
Changes made: Restored services with additional security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(152 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 29 · first

New Hampshire State AG+3d

Indiana State AG+4d

Montana State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1259.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2024
Raw hash: df3010e93aabcf6b2f623bb726992514ac05a72797ddaeda5f322765f4362e19

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe Global Atlantic Financial Group LLC

Victim entityInfosys McCamish Systems, LLC

Incidentdiscovered Nov 2, 2023

Stated responseMcCamish immediately disabled systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov