Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Fidelity Investments Life Insurance Company Notifying 28,000 People of Data Breach

Fidelity says 28,000 individuals were impacted by data breach at third-party services provider Infosys McCamish System.

Fidelity Investments Life Insurance Company is informing roughly 28,000 individuals that their personal information was compromised in a data breach at third-party services provider Infosys McCamish System (IMS).

The data breach, Fidelity says, was the result of a cyberattack on IMS’ systems, which occurred in October 2023 and led to unauthorized access to data that IMS was holding on behalf of its customers.

“The incident likely resulted in an unauthorized third-party obtaining information held by IMS regarding you and your policy,” Fidelity notes in the notification letter to the impacted individuals, a copy of which was submitted with the Maine Attorney General’s Office.

The affected information, Fidelity says, includes names, dates of birth, state of residence, Social Security numbers, bank account and routing numbers, and credit card numbers.

According to Fidelity, however, the investigation into the scope of the data breach continues: “at this point, they are unable to determine with certainty what personal information was accessed as a result of this incident.”

Fidelity told the Maine AGO that just over 28,000 individuals were impacted by the data breach. While the entry on Maine AGO’s website notes that employees were affected, the notification letter reveals that customer information was exfiltrated.

The impacted individuals are being offered two years of credit monitoring, at no cost.

The data breach appears to be the result of the same cyberattack on IMS that also impacted Bank of America, which last month said roughly 57,000 customers were affected.

Advertisement. Scroll to continue reading.

IMS disclosed the cyberattack on November 3, in a filing with the US Securities and Exchange Commission, without sharing details on the nature of the incident. In a subsequent filing, the company revealed that customer data was stolen from its systems, estimating losses at $30 million.

“Fidelity Investments Life Insurance Company (FILI) has started notifying certain customers that their information may have been compromised in a cybersecurity incident that occurred at Infosys McCamish Systems, a vendor used by FILI. We continue to be in contact with Infosys McCamish and will take appropriate actions as needed,” Fidelity said in an emailed statement.

SecurityWeek has emailed IMS for additional information on the incident and will update this article as soon as a reply arrives.

*Updated with statement from Fidelity and to include the company’s full name in headline

Related: American Express Notifies Customers of Data Breach

Related: Golden Corral Data Breach Impacts 180,000 Employees

Related: 67,000 U-Haul Customers Impacted by Data Breach

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

Certificate lifecycle management firm Sectigo has hired Jason Scott as its CISO.

The State of Vermont has appointed John Toney as the state’s new CISO.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.