HackingTechnologyFinancial ServicesInformationSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

INFOSYS MCCAMISH SYSTEMS, LLC

bd_76fe70ad7d12b322 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 17, 2024

To disclose

—

Affected

101state residents only

Linked

28 filings

Confidence

69%

Full breach record for INFOSYS MCCAMISH SYSTEMS, LLC →3 incidents on file

Infosys McCamish Systems LLC (IMS), a key administrative vendor for TIAA and TIAA Life, filed a supplemental notice with the New Hampshire Attorney General regarding a cybersecurity incident occurring in November 2023. IMS notified 101 New Hampshire residents of the breach, offering free identity monitoring. No fraudulent use of data was reported at the time of filing.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 17, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 28 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_09e9ee0e8ae4cab22024-10-21 · +4dVerified by operator
Maine State AGbd_e146df2080ac907d2024-10-21 · +4dVerified by operator
Montana State AGbd_0c4cfe30b6b9a1792024-11-15 · +29dVerified by operator
California State AGbd_2c639b79e47974562024-09-09 · +38dVerified

Show 6 more filings ↓up to 155d gap

New Hampshire State AGbd_da623b6c9a5b4c602024-09-09 · +38dVerified by operator
Maine State AGbd_e4f30fd83097d2ea2024-09-09 · +38dVerified
California State AGbd_2602582028ab1a682024-12-10 · +54dVerified by operator
California State AGbd_09a55fdd2bbb246a2024-08-15 · +63dVerified
Maine State AGbd_0b9b35d5b78a3c9c2025-03-21 · +155dVerified by operator
California State AGbd_d5e10ce4b017519f2025-03-21 · +155dVerified by operator

Showing first 10 of 27 linked disclosures.

Name: INFOSYS MCCAMISH SYSTEMS, LLC
norm: infosys mccamish

Name: INFOSYS MCCAMISH SYSTEMS, LLC
norm: infosys mccamish
Industry: TechnologyllmFinancial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 101state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Filed initial notification with New Hampshire Attorney General on or around June 27, 2024

During the incident: Sent customer notifications to 101 New Hampshire residents
Offered free identity monitoring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 4 states

View merged incident ↗

California State AGAug 15 · first

California State AG+25d

New Hampshire State AG+25d

Maine State AG+25d

New Hampshire State AG+63d · this page

California State AG+67d

Maine State AG+67d

Montana State AG+92d

California State AG+117d

Maine State AG+218d

California State AG+218d

Pattern: first filing Aug 15 (CA), last Mar 21 (CA) — a 218-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 27 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/infosys-mccamish-systems-20241017.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2024
Raw hash: 80a7015d85397ce4a8958b24caa386fe6681eb1bcacdd8cfb49304db45efa17f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityINFOSYS MCCAMISH SYSTEMS, LLC

Victim entityINFOSYS MCCAMISH SYSTEMS, LLC

IncidentThird-Party / Supply Chain

Stated responseSent customer notifications to 101 New Hampshire residents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov