Infosys agrees to pay $17.5 million to settle lawsuits over McCamish cyber incident

The lawsuits were filed in relation to a November 2023 cyber incident, due to which Infosys subsidiary Infosys McCamish Systems (IMS) faced issues that led to "non-availability of certain applications and systems".

Infosys on March 14 said that it has reached an agreement in principle with the plaintiffs of 6 class action lawsuits pending against Infosys McCamish Systems (McCamish) and a few McCamish’s customers for a "cyber incident" and has agreed to pay $17.5 million to settle the matter, the IT major said in a statement.

The Bengaluru-based firm said the proposed deal would settle all the pending class action lawsuits and resolve all allegations made in this matter.

"Once approved, the settlement will resolve all allegations made in the class action lawsuits without

admission of any liability," the company said in a statement.

The company said McCamish and the plaintiffs engaged in mediation on March 13, 2025, which resulted in an agreement in principle.

The lawsuits were filed in relation to a November 2023 cyber incident, due to which Infosys subsidiary Infosys McCamish Systems (IMS) faced issues that led to "non-availability of certain applications and systems".

The firm, in a stock exchange filing, had said that it was working with a leading cybersecurity products provider to resolve the issue at the earliest and also launched an independent investigation to identify the potential impact on systems and data.

"Data protection and cybersecurity are of utmost importance to us," Infosys had said then in a regulatory filing.