Clustered 13 filings across 8 jurisdictions · filing window Jun 7, 2024 → Sep 9, 2024. View entity profile → Other incidents for this victim →
incident inc_a7d13eb999f34918 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA DE ME MT NH OR VT WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
13 filings across 8 jurisdictions · Jun 7, 2024 – Sep 9, 2024 · 2 milestones
Nov 2, 2023
When the intrusion reportedly occurred, per the linked filings
Nov 2, 2023
Reported by NEW HAMPSHIRE AG, WASHINGTON AG, VERMONT AG, DELAWARE AG, MAINE AG, CALIFORNIA AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Infosys McCamish Systems (IMS), a vendor for TIAA, experienced a cybersecurity incident on or around November 2, 2023, where an unauthorized party gained access to IMS systems. TIAA terminated connections and scanned its systems. IMS engaged forensic and e-discovery firms, implemented security controls, and restored services. TIAA began notifying 3,352 New Hampshire residents on March 7, 2024, offering credit monitoring.
Affected (this filing): 3,352
Infosys McCamish Systems, LLC, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-11-02 and filed notice on 2024-06-27. 43,393 Washington residents were affected. 238 days elapsed between awareness and notification. 4 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 43,393
Infosys McCamish Systems, LLC notified consumers of a ransomware incident occurring between October 29 and November 2, 2023. Unauthorized access and acquisition of personal information, including names and government identifiers, occurred. The incident was contained and remediated. Affected individuals were offered 24 months of identity monitoring services through Kroll. A specific count of 2,424 affected individuals was noted for Rhode Island residents.
Infosys McCamish Systems LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-06-27. The breach occurred from 10/29/2023 to 11/2/2023. 5,426 Montana residents were affected.
Affected (this filing): 5,426
Infosys McCamish Systems, LLC (IMS) disclosed a ransomware incident affecting 10,609 Delaware residents. The breach occurred between October 29 and November 2, 2023, when IMS systems were encrypted. IMS, a data processor, notified the Delaware Attorney General on June 27, 2024. The incident involved unauthorized access and acquisition of personal data including SSNs, medical records, biometric data, and financial information. IMS engaged third-party forensic and eDiscovery experts, notified law enforcement, and contained the incident. Affected individuals were offered 24 months of credit monitoring via Kroll.
Affected (this filing): 10,609
Infosys McCamish Systems, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-06-27. 6,078,263 individuals were affected.
Affected (this filing): 6,078,263
Infosys McCamish Systems, LLC reported a data breach impacting 11,866 Maine residents. The breach, described as an external system breach (hacking), occurred between October 29, 2023, and November 2, 2023, and was discovered on the same day. Affected individuals were notified on June 27, 2024, and offered 24 months of credit monitoring and identity theft services through Kroll.
Affected (this filing): 11,866
Infosys McCamish Systems, LLC experienced a ransomware incident where systems were encrypted and data was subject to unauthorized access and acquisition between October 29, 2023, and November 2, 2023. The company became aware of the incident on November 2, 2023. The incident has been contained and remediated. Approximately 2,424 individuals were affected, with specific mention of Rhode Island residents. The company engaged third-party cybersecurity experts and notified law enforcement.
Affected (this filing): 2,424
Infosys McCamish Systems, LLC experienced a ransomware incident where systems were encrypted on November 2, 2023. Unauthorized activity occurred between October 29 and November 2, 2023, resulting in the unauthorized access and acquisition of personal information, including names. The incident has been contained and remediated. Affected individuals are offered 24 months of credit monitoring.
An external system breach at Infosys McCamish Systems, LLC occurred between October 29 and November 2, 2023. The breach, discovered on November 2, 2023, affected 11,866 Maine residents. The company began notifying affected individuals on June 27, 2024, and is offering 24 months of credit monitoring and identity theft services through Kroll.
Affected (this filing): 11,866
Infosys McCamish Systems LLC experienced a ransomware incident where systems were encrypted and data was subject to unauthorized access and acquisition between October 29 and November 2, 2023. The company became aware of the incident on November 2, 2023. The incident has been contained and remediated. Approximately 2,424 individuals were affected. The company engaged third-party cybersecurity experts and notified law enforcement. Complimentary identity monitoring services are being provided.
Affected (this filing): 2,424
Infosys McCamish Systems LLC experienced a ransomware incident where systems were encrypted and data was subject to unauthorized access and acquisition between October 29, 2023, and November 2, 2023. The company became aware of the incident on November 2, 2023. The incident has been contained and remediated. Approximately 2,424 individuals were affected, including residents of Rhode Island. The company engaged third-party cybersecurity and eDiscovery experts, notified law enforcement, and is offering 24 months of identity monitoring services.
Affected (this filing): 2,424
Infosys McCamish Systems, LLC reported a data breach to the Maine Attorney General, indicating that an external system breach occurred between October 29, 2023, and November 2, 2023. The breach was discovered on November 2, 2023, and affected 11,866 Maine residents. The company began notifying affected individuals on June 27, 2024, and offered 24 months of credit monitoring and identity theft services through Kroll.
Affected (this filing): 11,866