What to Do If You Received a Payment Notice From the Infosys McCamish Data Breach

What the Infosys McCamish breach means for your bills and payments

In 2023, Infosys McCamish Systems, a company that processes billing and customer data for insurance companies and other financial services, experienced a data breach. If you received a notice in the mail, it means your personal information—which may include your name, address, Social Security number, or financial account details—was exposed. The breach did not directly compromise your bank account or bills, but the exposed information could be used to commit identity theft or fraud.

If you received a settlement notice or payment offer related to this breach, you need to understand what it covers, how to claim it if you are may have access to to it, and what steps to take to protect yourself going forward. This guide explains the real mechanics of how these breach settlements work and what your actual options are.

Key Takeaways

• Breach settlement payments are typically funded by the company responsible for the breach, not by government programs, and are distributed through a claims process you must initiate yourself.
• You will need to provide proof of your identity and proof that you were affected by the breach—usually a copy of the notice you received or documentation showing you were a customer of an affected company.
• Settlement payments vary widely depending on the terms of the lawsuit; some cover only out-of-pocket losses you can document, while others offer fixed amounts per person regardless of actual harm.
• The payment is typically made by check or direct deposit, and the timeline from claim submission to payment can range from several weeks to several months.
• You should monitor your credit reports and financial accounts for suspicious activity regardless of whether you claim the settlement payment.

How breach settlement payments actually work

When a data breach occurs and a lawsuit is filed, the company responsible may settle the case by agreeing to pay affected individuals. The settlement is not automatic—you do not receive money simply because your data was breached. Instead, a settlement administrator is appointed to manage the claims process, and you must submit a claim to receive your portion of the settlement fund.

The settlement notice you received should include the claims administrator's contact information, a deadline for submitting your claim, and instructions on what documents you need to provide. The administrator verifies your identity and your status as an affected person, then processes your payment. This process is separate from any bill payments or financial transactions you normally make—it is a one-time payment, not a credit or adjustment to an existing account.

Settlement amounts vary significantly. Some settlements offer a fixed amount per person (for example, $50 to $200 per affected individual), while others reimburse only documented losses such as money spent on credit monitoring or identity theft recovery. Read your notice carefully to understand which type applies to you.

What documents you need to claim your payment

To submit a claim, you will typically need to provide proof of identity and proof that you were affected by the breach. Proof of identity usually means a copy of a government-issued ID such as a driver's license or passport. Proof of being affected is usually the breach notification letter itself, or documentation showing you were a customer of one of the companies whose data was exposed.

If the settlement requires you to document actual losses—such as money spent on credit monitoring services or fees charged by your bank due to fraud—you will need receipts, bank statements, or credit card statements showing those charges. Keep copies of everything you submit; do not send originals.

The claims administrator will specify exactly what documents they accept and in what format (mail, email, or online upload). Follow their instructions precisely. Claims submitted without required documents are often denied, and you may have a limited window to resubmit.

Deadlines and how long payment takes

Breach settlement notices always include a claims deadline—the last date you can submit your claim. This deadline is firm. If you miss it, you forfeit your right to payment from that settlement. Mark the date on your calendar and submit your claim well before the deadline, not on the last day.

After you submit your claim, the administrator reviews it, verifies your information, and processes payment. This typically takes four to twelve weeks, depending on the volume of claims and the complexity of verification. You should receive a confirmation that your claim was received, and many administrators provide a tracking number or online portal where you can check the status of your claim.

Payment is usually made by check mailed to your address or by direct deposit to a bank account you provide. If you choose direct deposit, you will need to provide your routing number and account number. Some administrators offer a prepaid debit card as an alternative if you do not want to provide banking information.

Protecting yourself after a data breach

Receiving a breach settlement payment does not mean your information is secure going forward. The data that was exposed is still out there, and you should take steps to monitor for fraud and identity theft. Start by checking your credit reports for unauthorized accounts or inquiries. You can request a free credit report from each of the three major bureaus—Equifax, Experian, and TransUnion—once per year at annualcreditreport.com.

Consider placing a fraud alert or credit freeze on your credit file. A fraud alert tells creditors to verify your identity before opening new accounts in your name; it lasts one year and is free. A credit freeze prevents creditors from accessing your credit report entirely without your permission; it is also free and lasts until you remove it. Both are available directly from each credit bureau.

Monitor your bank and credit card statements regularly for charges you do not recognize. Set up account alerts with your bank so you are notified of large transactions or new account activity. If you spot fraud, contact your bank or credit card company immediately and file a report with the Federal Trade Commission at identitytheft.gov.

What to do if you did not receive a notice

If you believe you were affected by the Infosys McCamish breach but did not receive a notice, you can search for active settlements and claims at the Settlement Claims Administrator's website or at claims.com, which aggregates information about many active settlements. You can also contact the claims administrator directly using the contact information from any notice you may have received, or search for "Infosys McCamish settlement" along with your state to find current information.

Be cautious of scams. Legitimate settlement administrators will never contact you by phone or email asking you to pay a fee to claim your settlement, and they will never ask for your full Social Security number or banking information over the phone. If someone contacts you claiming to represent a settlement, ask for their name and the administrator's official phone number, then call that number yourself to verify.

How this payment affects your taxes and other benefits

Breach settlement payments are generally not taxable income, because they are compensation for harm rather than earnings. However, if the settlement includes reimbursement for lost wages or interest earned on the settlement fund itself, those portions may be taxable. The settlement administrator should provide you with a tax form (usually a 1099 or similar document) if any portion of your payment is taxable.

Settlement payments typically do not affect your may be able to access for means-tested benefits such as Medicaid, SNAP, or housing assistance, because they are one-time payments and not considered ongoing income. However, if the payment is large enough to push your total assets above the limit for a particular program, it could temporarily affect your may be able to access. If you receive means-tested benefits, contact the program administrator to ask how a settlement payment will be treated.

Frequently Asked Questions

Can I claim the settlement payment if I have already paid for credit monitoring?

Yes, if the settlement covers documented losses. You will need to submit receipts or statements showing what you paid for credit monitoring services. If the settlement offers a fixed amount per person regardless of actual losses, you do not need to document anything—you receive the amount stated in the settlement terms.

What if I moved and did not receive the breach notice?

Contact the claims administrator using the contact information from the settlement notice (if you have one), or search online for the settlement name and your state. Many administrators maintain a website where you can submit a claim online or request a replacement notice. Provide your current address so they can update their records.

Do I have to claim the settlement payment, or can I ignore it?

You are not required to claim it, but you forfeit the payment if you do not submit a claim before the deadline. There is no penalty for not claiming, and the unclaimed funds are typically donated to a cy pres recipient (usually a nonprofit related to privacy or consumer protection) or returned to the defendant company.

How do I know if a settlement notice is real or a scam?

Legitimate notices come by mail, not email or phone. They include the name of the claims administrator, a website address, and a phone number you can call to verify. Never click links in emails claiming to be from a settlement administrator; instead, search for the administrator's name online and call the number you find independently.

What if my claim is denied?

The administrator should provide a reason for the denial. Common reasons include missing documents, failure to prove you were affected by the breach, or submitting your claim after the deadline. If you believe the denial was wrong, contact the administrator to ask about an appeal process. Some settlements allow one appeal; others do not.