John Hancock faces lawsuit over breach affecting six million people

John Hancock Life Insurance Co. is facing a proposed class action lawsuit stemming from a ransomware attack by a third-party vendor that exposed the private information of more than six million individuals.

Named plaintiff Vivian Lindley alleges that between October 29 and November 2, 2023, an unauthorized party gained access to and obtained personally identifiable information, including social security numbers, of the proposed class. It did so by encrypting ransomware on the systems of Infosys McCamish Systems, a third-party vendor used by John Hancock to provide “insurance platform solutions.” Infosys is not named as a defendant.

The lawsuit alleges that John Hancock failed to …