Infosys Subsidiary Settles Oregon Data Breach Concerns for $225,000
Infosys McCamish Systems, a subsidiary of Infosys BPM, has agreed to pay $225,000 to settle concerns over a data breach with the Oregon Attorney General's Office. The settlement, formalized through an Assurance of Voluntary Compliance (AVC), addresses potential violations of Oregon's Consumer Information Protection Act and Unlawful Trade Practices Act. The company has not admitted to any wrongdoing, and the full payment is due within thirty business days. Infosys Limited disclosed the settlement details to stock exchanges, emphasizing that the AVC resolves the matter without further action.

*this image is generated using AI for illustrative purposes only.
Infosys McCamish Systems, a subsidiary of Infosys BPM, has reached an agreement with the Oregon Attorney General's Office to resolve concerns over a data breach. The settlement, formalized through an Assurance of Voluntary Compliance (AVC), involves a payment of $225,000 by the company.
Details of the Settlement
The Oregon Attorney General's Office had expressed concerns that Infosys McCamish Systems may have violated the Oregon Consumer Information Protection Act and the Oregon Unlawful Trade Practices Act. The primary issue revolved around the company's alleged failure to provide sufficient notice as required by state law following the data breach.
Key Points of the Agreement
- Infosys McCamish Systems will pay $225,000 to the Oregon Attorney General's Office.
- The full amount is due within thirty business days of the agreement's execution.
- The company has not admitted to any wrongdoing or violation of the Acts mentioned.
- The AVC specifically acknowledges that this is not an admission of guilt.
Infosys' Official Statement
In an official statement to stock exchanges, Infosys Limited disclosed the details of the settlement. The company emphasized that the Assurance of Voluntary Compliance resolves the matter without any further action and does not constitute an admission or finding of any violations.
Impact on Infosys
While the $225,000 settlement is unlikely to significantly impact Infosys' financials, the incident highlights the growing importance of data protection and compliance with local regulations for global IT service providers.
Looking Forward
As companies continue to handle sensitive data, this settlement serves as a reminder of the potential legal and financial consequences of data breaches. It underscores the need for robust data protection measures and prompt, transparent communication in the event of security incidents.
Infosys and its subsidiaries will likely review and strengthen their data protection protocols to prevent similar incidents in the future, ensuring compliance with various regional data protection laws.
Historical Stock Returns for Infosys
1 Day | 5 Days | 1 Month | 6 Months | 1 Year | 5 Years |
---|---|---|---|---|---|
-0.88% | -5.63% | -12.48% | -25.20% | -20.52% | +49.75% |