MIT TRACE

MIT CTL Logo
Back to Main Dashboard

Ransomware renders Infosys McCamish Systems' business applications unavailable

On November 2, 2023, ransomware encrypted systems operated by Infosys McCamish Systems, a U.S.-based subsidiary providing outsourced insurance and financial-sector business processing services. The company confirmed that affected applications and systems became unavailable, interrupting its ability to provide technology-enabled services. Substantial remediation and restoration were completed by December 31, 2023. Infosys later reported USD 38 million in combined lost contracted revenue and incident-related costs as of March 31, 2024. Forensic investigation identified earlier unauthorized activity beginning October 29, distinct from the November 2 discovery and service disruption.

81

Estimated severity

81 / 100

95

Source reliability

95 / 100

Approximate Date

2023-11-02

Targeted Company

INFOSYS MCCAMISH SYSTEMS

Targeted Company Supply Chain Impact

  1. Distribution & Fulfillment

  2. Procurement & Sourcing

  3. Production & Manufacturing

  4. Sales (Retail & Ecommerce)

  5. Warehousing

  6. Service Delivery

  7. Unrecognized Impact

Supply Chain Relations

No information

Geographic Impact

Country Targeted Company

United States

USA

Other Affected Countries

No other affected countries reported

Target country

United States

Affected countries

United States

Impacted regions

Georgia · United States

Operational Impact

Duration

No information

Financial impact (USD M)

$38M

Impact types

Operational disruptionService unavailability

Affected sectors

Finance & InsuranceTechnology & IT Services

Affected departments

Information Technology

Attack Profile

Attack types

Data exfiltrationRansomwareUnauthorized access

Attributed threat actors

No information

Sources

Please rotate your phone

MIT TRACE is optimized for landscape orientation on mobile.