Capita
Disclosed Apr 3, 20233 years ago6,600,000 affectedSettled
Ransomware attack on UK outsourcer Capita exposes data of over 6 million people
Attackers entered Capita's network in March 2023, stole client and staff data and then deployed ransomware, disrupting services. Pension scheme clients such as the Universities Superannuation Scheme reported member data at risk, and the ICO found that data on over 6 million people was accessed.
What is known
| People affected | 6,600,000 (as reported by the organization) |
|---|---|
| Disclosed | Apr 3, 2023 |
| Discovered | Mar 31, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Addresses, Financial, Health, Employment, Other |
| Sector | Tech · GB |
| Status | Settled |
| Lawsuit or fine | GBP 14M ICO fine against Capita plc and Capita Pension Solutions (2025) (about $19M) |
Sources
| Source | |
|---|---|
| ICO enforcement: Capita plc and Capita Pension Solutions Ltdico.org.uk · Regulator | Regulator |
| Outsourcing giant Capita fears customer data stolen during ransomware attacktechcrunch.com · News | News |
| Capita blames cyber-attack for outage as company races to restore IT systemstheguardian.com · News | News |
| Capita fined GBP 14m for data breach affecting over 6m peopleico.org.uk · Regulator | Regulator |
| Capita breach fallout widens as customers learn of data thefttechcrunch.com · News | News |
Notices filed
History of this record
- 2026-09-25 · records: empty to 6600000 · admin
- 2026-09-25 · fine_usd: empty to 18700000 · admin
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.