Infosys McCamish Pays $30,000 Penalty in South Dakota Cyber Incident Settlement
Infosys subsidiary McCamish Systems has entered a consent order with South Dakota's Division of Insurance, paying $30,000 to resolve regulatory concerns about notification compliance following a 2023 data breach, without admitting any legal violations.

*this image is generated using AI for illustrative purposes only.
Infosys Limited has disclosed that its subsidiary Infosys McCamish Systems (IMS) entered into a consent order with the South Dakota Division of Insurance on December 22, 2025, to resolve concerns related to a 2023 data breach notification matter.
Consent Order Details
The South Dakota Division of Insurance expressed concerns that IMS may have violated South Dakota Codified Laws related to notification requirements following a 2023 data breach. The regulatory action specifically cited IMS's failure to respond to the Division of Insurance's request for information within the required 20-day timeframe.
| Settlement Parameter | Details |
|---|---|
| Penalty Amount | $30,000 |
| Settlement Date | December 22, 2025 |
| Regulatory Authority | South Dakota Division of Insurance |
| Liability Admission | None |
Regulatory Compliance Matter
The consent order allows IMS to resolve the matter without any further regulatory action. Importantly, the agreement specifically acknowledges that entering into the consent order does not constitute an admission that IMS violated the applicable South Dakota laws.
Corporate Structure and Impact
Infosys McCamish Systems operates as a subsidiary of Infosys BPM Limited, which is itself a wholly-owned subsidiary of Infosys Limited. The company has submitted the agreed-upon monetary penalty of $30,000 to the South Dakota Division of Insurance as part of the settlement terms.
Regulatory Disclosure
Infosys has fulfilled its disclosure obligations under Regulation 30 of SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015. The company has notified all relevant stock exchanges, including BSE Limited, National Stock Exchange of India Limited, and New York Stock Exchange, and made the information available on its corporate website at www.infosys.com .
This development represents a continuation of regulatory matters that Infosys had previously disclosed in its statement dated March 14, 2025, regarding the McCamish cyber incident.
Historical Stock Returns for Infosys
| 1 Day | 5 Days | 1 Month | 6 Months | 1 Year | 5 Years |
|---|---|---|---|---|---|
| -0.44% | +3.38% | +6.98% | +4.71% | -13.25% | +33.98% |
















































