INFOSYS MCCAMISH SYSTEMS, LLC

Infosys McCamish Systems LLC (IMS) experienced a cybersecurity event on or around November 3, 2023, where an unauthorized third party accessed IMS systems. IMS provides services for deferred compensation plans, including those serviced by Bank of America. IMS notified Bank of America on November 24, 2023, that data concerning these plans may have been compromised. IMS retained a third-party forensic firm to investigate and assist with recovery, including containing malicious activity and rebuilding systems. IMS states it has found no evidence of continued threat actor access. The incident likely involved personal information of plan participants, including names, addresses, business emails, dates of birth, Social Security numbers, and account information. Bank of America is providing a complimentary two-year identity theft protection membership through Experian IdentityWorks to affected individuals.