MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICMediumContained
infosysbpm.com
bd_7c22d83c408f3e41 · schema v1 · pii pii-v1
Full breach record for infosysbpm.com →Infosys McCamish Systems, LLC reported a ransomware incident affecting 16,680 New Hampshire residents. Unauthorized access and data acquisition occurred between Oct 29 and Nov 2, 2023. IMS detected the encryption on Nov 2, 2023, engaged forensic experts, and contained the incident. Personal information was exposed. IMS notified law enforcement and offered credit/identity monitoring services.
Leak gap clock✗ Leak >180d34 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 236 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8582aa4f2e64e65bIndiana State AGfiled 2024-06-27Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/infosys-mccamish-systems-20240627.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2024
- Raw hash
- efa794208a7befd1cbc0efd00b4f0b39bafc66f77b72050732e4b4b58b43901d
Reporting entity
- Name
- infosysbpm.comnorm: infosysbpmcom
- Domain
- infosysbpm.com
Victim entity
- Name
- infosysbpm.comnorm: infosysbpmcom
- Domain
- infosysbpm.com
Incident
- Discovered
- Nov 2, 2023
- Materiality determined
- May 28, 2024
- Notification sent
- Jun 27, 2024
- Affected individuals
- 16,680
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.