Infosys: Infosys unit in US hit by ransomware attack

BENGALURU: McCamish Systems, a US-based unit of Infosys, is learnt to be impacted by a ransomware attack, sources told TOI. Infosys, however, has not disclosed the impact and nature of the attack yet.
Online chronicler Cybersecurity Insiders said this incident appears to involve a ransomware variant, with further details to be disclosed following a comprehensive investigation.
“Infosys McCamish Systems, an advocate for robust data protection and security, is actively implementing measures to mitigate the risks stemming from this incident,” it said.

McCamish Systems, a subsidiary of Infosys BPM, was impacted by a cybersecurity event that resulted in non-availability of certain applications and systems in McCamish, the company said in a stock exchange filing on Friday.
McCamish is a platform based BPO firm that provides services to the financial services sector supporting life insurance, annuity products and retirement plans. It’s also a software reseller for industry-specific clients. McCamish was acquired by Infosys BPM (formerly Infosys BPO) in 2009.
Cybersecurity Insiders’ report said, “Speculation has arisen on platforms like Reddit, with some tech enthusiasts humorously suggesting that the attack may be in response to a statement by Narayana Murthy, who advocated that India’s younger generation, particularly those in the IT and software sector, should work 70 hours a week to demonstrate their dedication and competitiveness.”
An email sent to Infosys didn’t elicit a response till the time of going to press.
In 2020, Cognizant was impacted by the Maze ransomware attack related to its corporate credit cards. Cognizant had roped in the FBI to investigate, which had estimated a $50-70 million impact due to the attack.
In 2019, Wipro was subject to an advanced phishing attack that affected some employee accounts and customers that triggered Wipro to release a security patch instantly and conduct a forensic investigation by its partner network into the breach.
Wipro said it had triggered a security protocol to change their passwords. It, however, had clarified that the malware attack would not have any material impact on the company’s financials.