Infosys McCamish Systems, which provides consulting, IT, and outsourcing services, says LockBit stole sensitive info of 6M+ people in a 2023 ransomware attack
Bill Toulas / BleepingComputer :
Context & Ripple Effects
This disclosure extends LockBit's record of targeting large organizations and using stolen data for leverage, including the group’s claimed release of data taken from Boeing after an extortion dispute.
It also sits alongside another large LockBit-related notification: [[a:869150|Evolve Bank & Trust’s disclosure of personal-data access affecting at least 7.6 million people]]. The recurring issue is not only encryption or outage risk, but the downstream exposure created when service providers hold data for many individuals.
First-order effects
- Infosys McCamish Systems must manage the immediate consequences of a breach disclosure involving sensitive information for more than 6 million people, while those individuals face potential privacy and fraud risks.
- LockBit gains another public example of the value of data theft as an extortion tool, regardless of whether operational disruption is the main public consequence.
Second-order effects
- Organizations that use consulting, IT, and outsourcing providers are likely to scrutinize what personal data those vendors retain and which systems can access it; vendor concentration can turn one intrusion into a broad notification event.
- The scale of successive LockBit-related disclosures raises the cost of incident response for affected organizations and increases pressure on service providers to demonstrate segmentation, access controls, and breach readiness.
Third-order effects
- If data-theft extortion continues to produce large downstream exposures, ransomware risk will be assessed increasingly as third-party data-governance risk rather than solely as an IT-availability problem.
- The ransomware-as-a-service model described in the related coverage can sustain this pressure even as particular groups weaken, because specialized operators can separate intrusion, encryption, and extortion roles.
The trend: Ransomware is evolving toward a supply-chain data-exposure threat, where compromise of a service provider can create liabilities across millions of people and multiple client relationships.