Capita hit with £14 million fine after major data breach
Personal information, including financial records, passports, and home addresses, was stolen from Capita, leading to a regulatory fine and a heightened focus on cybersecurity measures across UK organisations.
The UK outsourcing firm Capita has been fined £14 million after a cyber-attack exposed the personal data of 6.6 million people. Sensitive information, including financial details, home addresses, passport images, and criminal records, was compromised.
Initially, the fine was £45 million, but it was reduced after Capita improved its cybersecurity, supported affected individuals, and engaged with regulators.
A breach that affected 325 of the 600 pension schemes Capita manages, highlighting risks for organisations handling large-scale sensitive data.
The Information Commissioner’s Office (ICO) criticised Capita for failing to secure personal information, emphasising that proper security measures could have prevented the incident.
Experts note that holding companies financially accountable reinforces the importance of data protection and sends a message to the market.
Capita’s CEO said the company has strengthened its cyber defences and remains vigilant to prevent future breaches.
The UK government has advised companies like Capita to prepare contingency plans following a rise in nationally significant cyberattacks, a trend also seen at Co-op, M&S, Harrods, and Jaguar Land Rover earlier in the year.
Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!