HackingFinancial ServicesTechnologyFinanceStolen CredentialsData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

Infosys McCamish Systems LLC

bd_3c2a297f228ab470 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2023

Filed

Feb 29, 2024

To disclose

17 weeks

Affected

389state residents only

Linked

16 filings

Confidence

66%

Northwestern Mutual notified Montana residents of a cybersecurity incident at third-party vendor Infosys McCamish Systems LLC (IMS) occurring on or around November 2, 2023. IMS systems were accessed by an unauthorized party. IMS disabled systems, engaged forensic and e-discovery firms, and restored services with additional controls. Northwestern Mutual's internal systems were not compromised. Data impact is under review; complimentary identity monitoring is offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 119 days

Nov 2, 2023

Begins

Nov 2, 2023

Discovered

Feb 29, 2024

Filed

vs. sector median

+7 wks slower

This filing is one of 16 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_604c26d3099e3fe92024-02-29Verified
Massachusetts State AGbd_bfc4408712b72fa62024-02-29Verified
Oregon State AGbd_f32704b1d1b017c12024-02-29Verified
Indiana State AGbd_7f405322cd8b7cd62024-03-01 · +1dVerified

Show 6 more filings ↓up to 22d gap

New Hampshire State AGbd_c86992b6fc6b6a8c2024-03-08 · +8dVerified
Indiana State AGbd_2f40c7ba9b1e8a512024-02-16 · +13dVerified
Massachusetts State AGbd_33933653706e0f642024-02-16 · +13dVerified
Maine State AGbd_569adbdb9e453b182024-02-16 · +13dVerified
Montana State AGbd_fa687827ad46b0a52024-02-16 · +13dVerified
Montana State AGbd_34f99a0a1b7ccc3f2024-02-07 · +22dCandidate

Showing first 10 of 15 linked disclosures.

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com

Name: Infosys McCamish Systems LLC
norm: infosys mccamish systems
Domain: northwesternmutual.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Nov 2, 2023
Breach occurred: Nov 2, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 389state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Third party: via Infosys McCamish Systems LLC
Initial access: external_remote_services

During the incident: IMS immediately disabled their systems
Retained a third-party forensics firm to investigate and assist with IMS’s recovery plan
Restored services to their systems with additional security controls
Retained a third-party e-discovery firm to investigate potential impact to consumer data
Providing a complimentary two-year membership in an identity monitoring service
Changes made: Additional security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(119 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGFeb 7 · first

Indiana State AG+9d

Massachusetts State AG+9d

Maine State AG+9d

Montana State AG+9d

Maine State AG+22d

Massachusetts State AG+22d

Oregon State AG+22d

Montana State AG+22d · this page

Indiana State AG+23d

New Hampshire State AG+30d

Pattern: first filing Feb 7 (MT), last Mar 8 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1146.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 29, 2024
Raw hash: 7eaf2b9e951fe6452df86451fd04b408df1be5a93f1f5fe65c5289b768cf8741

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Northwestern Mutual Life Insurance Company

Victim entityInfosys McCamish Systems LLC

Incidentdiscovered Nov 2, 2023

Stated responseIMS immediately disabled their systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov