Why BPOs Are Becoming Legal Targets
The article says business process outsourcing (BPO) providers face more lawsuits tied to cybersecurity, labor and governance failures, citing cases involving TaskUs, Cognizant, Conduent, Teleperformance, and Infosys. It notes TaskUs settled a securities fraud class action for $17.5 million, and Conduent’s cyberattack affected 62.2 million people. It argues indemnities allocate costs but do not bar third-party claims.
How this was made

The 30-second read
Why it matters
It highlights how indemnities may not prevent independent third-party claims and suggests governance and layered risk architecture as mitigation.
Market read
For traders, the article is more about legal risk framing than new, tradable company-specific developments.
What to watch
Investors may focus more on each company’s current cyber controls, insurance coverage, and any newly filed motions or rulings, none of which are provided here.
Background
The piece argues that outsourcing and BPO providers are increasingly targeted in lawsuits due to data-protection clauses and third-party beneficiary theories.
Ticker impact
The article cites the TaskUs securities fraud case, alleging faked attrition data and inflated Glassdoor ratings, ending in a $17.5M settlement.
Limited near-term impact from this article alone, but it reinforces litigation overhang for the name.
The piece is primarily explanatory, but it references a concrete settlement amount and specific alleged conduct that can affect perceived litigation risk.
It states Infosys agreed to a $17.5M settlement for lawsuits tied to a ransomware attack affecting its subsidiary McCamish Systems (IMS).
Moderate negative sentiment if investors generalize to broader outsourcing cyber risk.
The article does not add new settlement terms or timing; it mainly discusses legal doctrine and examples.
Market effects
Reinforces that BPOs face third-party beneficiary and cyber-related litigation risk, potentially increasing compliance spend and insurance costs across outsourcing.
Primarily US litigation framing (New York court, US-based crypto firm, US health data), which can heighten scrutiny for offshore delivery models.
Could influence global outsourcing contracting terms, including data-protection clauses, indemnities, and defense obligations.
Counterpoint
The article emphasizes doctrine and examples, but it also notes some claims are still allegations being tested, so immediate repricing may be overstated.
Key entities
- companyTaskUs
Referenced for a securities fraud case alleging manipulation of employee attrition data and Glassdoor ratings, settled for $17.5M.
- companyConduent
Referenced via ongoing litigation after a cyberattack exposed sensitive data of 62.2M individuals.
- companyTeleperformance
Referenced for a reported breach affecting about 2,631 people in early December 2022.
- companyInfosys
Referenced for a $17.5M settlement tied to ransomware-related lawsuits involving its subsidiary McCamish Systems (IMS).




