Third-party cyber attack compromises client data held by Fidelity Investments Life Insurance
In a recent development, Fidelity Investments Life Insurance Company has confirmed a data breach involving more than 28,000 of its customers. The breach, which occurred in October 2023, was linked to Infosys McCamish Systems, a third-party service provider.
According to the latest updates, the breach potentially compromised personal information such as names, Social Security numbers, bank account and routing numbers, and birthdates. Fidelity Investments discovered the breach on February 13, 2024, and began notifying affected customers in August 2025.
Infosys McCamish has retained outside experts and is still investigating the incident. Fidelity Investments has expressed that it takes the security of customer information seriously and attributes the breach to unauthorized third-party access through Infosys McCamish Systems. No further details about remediation or ongoing investigations have been reported.
It is important to note that this data breach is separate from the one reported by Bank of America in November 2023, which also involved more than 57,000 of its customers. The Bank of America data breach was not related to any security issues or breach of the Fidelity environment.
Fidelity Investments will take appropriate actions as needed in response to the data breach. The company encourages affected customers to monitor their accounts closely and to report any suspicious activity to the relevant authorities.
The investigation into the incident is ongoing, and updates will be provided as more information becomes available.
[1] Fidelity Investments Press Release, August 2025. [2] Infosys McCamish Systems Press Release, August 2025.
- Fidelity Investments has emphasized the importance of cybersecurity in its business operations, stating that it takes the security of customer information seriously and is taking appropriate actions following the data breach.
- Given the sensitive nature of the compromised data, including financial and personal information, the incident underscores the critical role of technology and cybersecurity in the finance industry.
