Breachesby GlyphBank of America
Disclosed Feb 1, 202457,028 affectedConfirmed
Infosys McCamish ransomware attack exposes Bank of America plan participants
Bank of America notified deferred compensation plan participants that service provider Infosys McCamish Systems was hit by a cyberattack around November 3, 2023, and told the bank on November 24 that plan data may have been compromised. Bank of America's own systems were not breached.
What is known
| People affected | 57,028 (as reported by the organization) |
|---|---|
| Disclosed | Feb 1, 2024 |
| Discovered | Oct 30, 2023 |
| Happened | Oct 29, 2023 |
| Attack | Vendor breach |
| Data exposed | NamesAddressesEmailsDates of birthSocial Security numbersFinancial |
| Sector | Finance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Bank of America
Breach, details not statedBreach notice filed with the Indiana AG, details not stated.495K affectedFinanceUSMar 28, 2023Breach, details not statedBreach notice filed with the California AG, details not stated.FinanceUSMay 18, 2020Breach, details not statedExposed names, payment cards, emails, phone numbers and addresses. Reported to the Maine AG.FinanceUSApr 9, 2018Breach, details not statedExposed names and payment cards. Reported to the Maine AG.FinanceUSMay 20, 2015Breach, details not statedExposed names and payment cards. Reported to the Maine AG.FinanceUSOct 8, 2014Lost backup tapes held data on 1.2 million federal charge card holdersLost or stolen device exposed names, Social Security numbers and financial details.Lost or stolen device1.2M affectedFinanceUSUnverifiedFeb 25, 2005
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdfby backfillSource
unknown to third-partyby seedSource
["names"] to ["names","addresses","emails","dob","ssn","financial"]by seedSource
empty to Bank of America notified deferred compensation plan participants that service provider Infosys McCamish Systems was hit by a cyberattack around November 3, 2023, and told the bank on November 24 that plan data may have been compromised. Banby seedSource
empty to Infosys McCamish ransomware attack exposes Bank of America plan participantsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.