Security News > 2023 > July > Capita staffers told attackers stole data from its own pension fund

Capita has informed some of its employees that its own pension fund was among the victims of a cybercrime attack on its system, resulting in the theft of their personal details, they say.

In a letter shared with UK newspaper The Times, Capita apparently told staff members a full three months after the breach that it had "Identified evidence that the following personal data relating to you is within the data compromised and/or copied from Capita's systems."

The Financial Times also reported Capita as saying: "We are informing those we have identified to be affected by the incident, and Capita colleagues are being contacted where necessary as part of that process."

Capita administers 450 pension schemes with 4.3 million members.

A spokesperson for The Pensions Regulator told us back in May: "We continue to work very closely with scheme trustees, other regulators and Capita. We are calling on all trustees to work with Capita to understand how their scheme has been impacted, to fulfil their responsibilities as data controllers, and to warn members of the threat of scams and how to protect themselves. We are following up robustly with all pension schemes administered by Capita to ensure they do so."

Capita is already facing its first legal claim over the data breach.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/07/07/capita_pension_cyber_attack/