Bank of America Customer Data Breached in Third-Party Hack

Over 57,000 customers affected by a November 2023 cybersecurity incident at Infosys McCamish.

A data breach at Infosys McCamish, a financial software provider, compromised the personal information of 57,028 Bank of America customers.
The breach, occurring on November 3, 2023, was caused by the ransomware group LockBit accessing Infosys McCamish's systems.
Affected customers held deferred compensation plans, which are significant for retirement savings beyond traditional 401(k) plans.
Bank of America provided affected customers with two-year identity theft protection.
Experts emphasize the growing cybersecurity risks in the financial sector's supply chain and the need for enhanced security measures.