Security News > 2023 > April > Capita has 'evidence' customer data was stolen in digital burglary

Business process outsourcing and tech services player Capita says there is proof that some customer data was scooped up by cyber baddies that broke into its systems late last month.

"As a result of the interruption, the incident was significantly restricted, potentially affecting around 4 percent of Capita's server estate. There is currently some evidence of limited data exfiltration from the small proportion of affected server estate which might include customer, supplier or colleague data."

This comes after Russian extortionist crew Black Basta claimed it was behind the digital burglary at Capita and put up for sale sensitive information it reckons it stole, and which reportedly includes personal bank account details of people and business selling products or services to Capita.

Infosec veteran Kevin Beaumont previously said the stolen information being offered for sale also included a Capita Nuclear document - Capita provides support staff for the command centre of the Civil Nuclear Constabulary - paper marked confidential, and the floor plans of multiple buildings.

Beaumont said earlier this month: "Capita's customers and regulators should be asking Capita to explain this - on the record and in writing."

TechMartketViews analyst Marc Hardwick said the "Million dollar questions" that are now facing Capita are "What data has been accessed, and to what extent the impact can be mitigated and how quickly this can be done."

News URL

https://go.theregister.com/feed/www.theregister.com/2023/04/20/capita_admits_to_evidence_that/