Breachesby GlyphCapita
Disclosed Apr 3, 20236,600,000 affectedSettled
Ransomware attack on UK outsourcer Capita exposes data of over 6 million people
Attackers entered Capita's network in March 2023, stole client and staff data and then deployed ransomware, disrupting services. Pension scheme clients such as the Universities Superannuation Scheme reported member data at risk, and the ICO found that data on over 6 million people was accessed.
What is known
| People affected | 6,600,000 (as reported by the organization) |
|---|---|
| Disclosed | Apr 3, 2023 |
| Discovered | Mar 31, 2023 |
| Attack | Ransomware |
| Data exposed | NamesAddressesFinancialHealthEmploymentOther |
| Sector | Tech · GB |
| Status | Settled |
| Lawsuit or fine | GBP 14M ICO fine against Capita plc and Capita Pension Solutions (2025) (about $19M) |
Sources
ICO enforcement: Capita plc and Capita Pension Solutions LtdOutsourcing giant Capita fears customer data stolen during ransomware attackCapita blames cyber-attack for outage as company races to restore IT systemsCapita fined GBP 14m for data breach affecting over 6m peopleCapita breach fallout widens as customers learn of data theft
Notices filed
History of this record
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.