Infosystem McCamish Systems and customers reported in the spring that a fall ransomware attack on IMS systems had affected about 108,000 financial services company customers.
IMS hired an outside company to help it investigate the attack, and it now believes the attack may have affected the records of about 6.1 million people.
In some cases, the exposed records included people's names, Social Security numbers, driver's license numbers, biometric data, payment card information and medical treatment information, according to a notice IMS filed with the Maine attorney general's office.
IMS is offering the people affected 24 months of credit monitoring and identity theft protection services from Kroll.
What it means: Some customers will need help with replacing passwords and personal identification documents and making sense of the credit monitoring reports.
Even for clients not directly affected by the data breach, helping them prove who they are to the satisfaction of banks, mutual fund companies and life insurers could get tougher before it gets easier.
