Meta tags:

Headings (most frequently used words):

and, 2023, capita, data, breach, contents, background, security, risks, timeline, impact, cost, regulatory, action, references,

Text of the page (most frequently used words):
the (85), and (60), #capita (54), data (48), 2023 (39), #breach (31), for (22), attack (19), 2025 (15), 000 (15), 2026 (14), ransomware (14), retrieved (12), security (12), may (11), march (11), hack (10), cyberattack (10), ico (10), was (9), from (9), incident (9), plc (9), edit (9), this (8), information (8), its (8), had (8), wikipedia (7), with (7), account (7), cyber (7), million (7), cost (7), been (7), group (7), 2024 (6), november (6), business (6), systems (6), personal (6), attacker (6), that (6), page (5), articles (5), cyberattacks (5), leak (5), guardian (5), pension (5), have (5), april (5), including (5), move (5), contents (4), search (4), using (4), links (4), malware (4), 2022 (4), 2021 (4), major (4), hacking (4), health (4), timeline (4), more (4), than (4), outsourcing (4), october (4), after (4), thousands (4), over (4), february (4), high (4), court (4), financial (4), client (4), action (4), process (4), people (4), cpsl (4), article (4), access (4), internal (4), compromised (4), tools (4), device (4), hide (4), sidebar (4), view (3), about (3), under (3), september (3), dead (3), all (3), breaches (3), united (3), hijacking (3), 2020 (3), hackers (3), ukraine (3), anonymous (3), content (3), theft (3), system (3), service (3), annual (3), august (3), 0261 (3), 3077 (3), issn (3), barings (3), law (3), linked (3), penalty (3), commissioner (3), office (3), organisations (3), members (3), behalf (3), strike (3), our (3), impact (3), measures (3), infringements (3), reduced (3), regulatory (3), combined (3), then (3), complaints (3), individuals (3), special (3), such (3), around (3), backupadmin (3), policies (3), services (3), hundreds (3), main (3), language (2), toggle (2), table (2), statement (2), code (2), contact (2), privacy (2), policy (2), terms (2), apply (2), use (2), last (2), categories (2), external (2), short (2), description (2), wikidata (2), kingdom (2), openai (2), google (2), whose (2), society (2), team (2), bear (2), events (2), grand (2), auto (2), during (2), national (2), public (2), iranian (2), domain (2), russia (2), british (2), russian (2), microsoft (2), server (2), incidents (2), partridge (2), joanna (2), firm (2), 25m (2), fined (2), records (2), notice (2), solutions (2), limited (2), claims (2), link (2), times (2), pensions (2), risk (2), makortoff (2), kalyeena (2), admits (2), references (2), brought (2), affected (2), out (2), concluded (2), settlement (2), fine (2), millions (2), saying (2), penalties (2), further (2), time (2), gdpr (2), both (2), were (2), taken (2), wide (2), 800 (2), infringement (2), multi (2), party (2), claim (2), clients (2), across (2), multiple (2), units (2), accounts (2), resets (2), relating (2), exfiltrated (2), category (2), criminal (2), record (2), uses (2), download (2), three (2), cobalt (2), operations (2), centre (2), automatic (2), alert (2), qakbot (2), which (2), administrator (2), would (2), least (2), other (2), professional (2), staff (2), background (2), risks (2), scheme (2), appearance (2), upload (2), file (2), changes (2), history (2), read (2), log (2), create (2), donate (2), menu (2), add, topic, mobile, cookie, statistics, developers, conduct, legal, safety, contacts, disclaimers, text, available, additional, site, you, agree, registered, trademark, non, profit, organization, wikimedia, foundation, inc, creative, commons, attribution, sharealike, license, rendered, parsoid, edited, utc, hidden, dmy, dates, good, different, crimes, https, org, index, php, title, 2023_capita_data_breach, oldid, 1377013978, clickfix, techniques, bootkitty, gayfemboy, akira, pipedream, cyclops, blink, blacklotus, predator, drovorub, covidlock, adrozek, copy, fail, sinkclose, gofetch, terrapin, reptar, logofail, downfall, retbleed, pre, log4shell, forcedentry, printnightmare, thunderspy, smbghost, publicly, disclosed, vulnerabilities, kirtaner, intelbroker, maia, arson, crimew, graham, ivan, clark, individual, meta, deepmind, anthropic, organizations, ais, committed, autonomous, hacks, wizard, spider, vice, siegedsec, shinyhunters, sakura, samurai, sandworm, rhysida, revil, pampaleaks, oceanlotus, lockbit, lightbasin, lapsus, killnet, army, indian, force, hafnium, guacamaya, gnosticplayers, ghostwriter, dridex, dark, storm, darkside, darkmatter, cozy, clop, blackcat, berserk, sudan, associated, groups, ancpi, meccha, chameleon, minnesota, water, agent, canvas, cyberwarfare, iran, war, neighbourly, managemyhealth, aura, polish, power, grid, collins, aerospace, jaguar, land, rover, paul, 4chan, paraguay, bank, sepah, global, telecommunications, soon, internet, archive, irleaks, banks, fur, affinity, trump, campaign, wazirx, ukrainian, against, change, healthcare, kadokawa, niconico, utils, backdoor, library, operation, triangulation, insomniac, games, moveit, evide, munster, technological, university, optus, shanghai, police, database, lastpass, vault, costa, rican, ddos, attacks, romania, viasat, invasion, red, cross, fuel, banco, oro, rifle, association, fbi, email, epik, transnet, kaseya, vsa, jbs, waikato, district, board, executive, colonial, pipeline, ivanti, pulse, connect, secure, exchange, 2003, rtm, source, leaks, windows, pack, vastaamo, easyjet, states, federal, government, nintendo, european, medicines, agency, twitter, blueleaks, computer, viruses, worms, 2010s, 2020s, therecord, media, says, contributed, loss, 106, jones, connor, situation, publishing, register, 14m, hour, delay, exposed, holders, sue, december, monetary, ingham, amy, archived, original, matters, clears, way, pursue, bbc, news, report, watchdog, davies, rob, uss, fund, details, stolen, cumbo, josephine, leading, warns, 470, customer, breached, blames, outage, company, races, restore, prescott, katie, allowed, claimants, proceed, judge, rejected, application, alleged, abuse, following, extended, period, dialogue, two, years, are, pleased, matter, reach, today, continues, focus, tirelessly, transformation, journey, benefit, customers, wider, adolfo, hernandez, ceo, responded, failed, duty, protect, entrusted, scale, could, prevented, sufficient, place, quoted, john, edwards, companies, entered, into, voluntary, admitting, agreeing, not, appeal, said, reflect, savings, earlier, certainty, imposing, final, mitigating, factors, steps, mitigate, harm, subjects, engagement, regulators, applied, uplift, aggravating, factor, reflecting, higher, degree, responsibility, technical, organisational, each, figure, proportionality, stage, citing, nature, double, punishment, position, admission, liability, arriving, total, 300, 500, applying, five, step, fining, methodology, treated, relevant, statutory, maxima, worldwide, turnover, gravest, set, starting, points, 745, 600, 480, seriousness, adjustments, respectively, led, widespread, concern, formal, 678, received, directly, significant, operational, reputational, consequences, disrupted, several, weeks, password, approximately, results, year, attributed, excluding, releases, friday, 31st, experienced, primarily, impacting, 365, applications, deploys, hosts, passwords, 359, reported, 973, rclone, begins, downloading, files, tool, called, systembc, initially, 827, downloaded, eventually, reaches, via, channel, invokes, management, notices, suspicious, activity, devices, takes, offline, containment, like, bloodhound, processes, quarantines, platform, identifies, recovering, decrypting, credentials, logs, has, sent, gains, employee, malicious, javascript, script, downloads, jdmb, privileged, used, rights, lacked, restrictions, monitoring, normally, privilege, model, penetration, tests, carried, between, early, already, identified, configuration, vulnerability, but, corrective, before, responsible, protection, operating, core, many, subsidiaries, stored, found, there, evidence, audits, despite, requiring, controls, employed, tens, acted, controller, processor, relied, central, infrastructure, investigation, prompting, failures, implement, appropriate, later, confirmed, end, notified, estimated, recovery, remediation, expenses, universities, superannuation, exfiltration, affecting, provider, processed, late, gained, stole, large, volumes, deployed, disrupting, causing, prolonged, outages, parts, target, location, date, event, free, encyclopedia, item, projects, printable, version, pdf, print, export, switch, legacy, parser, get, shortened, url, cite, permanent, related, what, here, general, actions, english, talk, հայերեն, top, pages, recent, community, portal, learn, help, contribute, random, current, navigation, jump,

Text of the page (random words):
2023 capita data breach wikipedia jump to content main menu main menu move to sidebar hide navigation main page contents current events random article about wikipedia contact us contribute help learn to edit community portal recent changes upload file special pages search search appearance donate create account log in personal tools donate create account log in contents move to sidebar hide top 1 background and security risks 2 timeline 3 impact and cost 4 regulatory action 5 references toggle the table of contents 2023 capita data breach 1 language հայերեն edit links article talk english read edit view history tools tools move to sidebar hide actions read edit view history general what links here related changes upload file permanent link page information cite this page get shortened url switch to legacy parser print export download as pdf printable version in other projects wikidata item appearance move to sidebar hide from wikipedia the free encyclopedia 2023 capita data breach cyberattack event date 22 march 2023 2023 03 22 april 2023 location united kingdom target capita it systems and client data the 2023 capita data breach was a ransomware and data exfiltration incident affecting capita a british business process outsourcing and professional services provider and millions of people whose data it processed in late march 2023 hackers gained access to capita s systems stole large volumes of client and staff information and then deployed ransomware disrupting internal it services and causing prolonged outages across parts of the business 1 2 3 major clients including the universities superannuation scheme later confirmed that personal data about hundreds of thousands of pension scheme members may have been compromised 4 5 by the end of may 2023 at least 90 organisations had notified the information commissioner s office ico of personal data breaches linked to the incident 6 and capita estimated that the attack would cost up to 25 million in recovery and remediation expenses 7 an investigation by the ico concluded that personal data relating to around 6 6 million individuals including special category data such as health and criminal record information had been exfiltrated prompting hundreds of complaints and a high court multi party claim on behalf of more than 8 000 people 8 9 7 8 10 in october 2025 the ico fined capita plc and capita pension solutions limited a combined 14 million for failures to implement appropriate security measures under the uk gdpr 9 5 11 background and security risks edit the capita group is a business process outsourcing and professional services group at the time of the incident it employed tens of thousands of staff and acted as both data controller and data processor for hundreds of organisations that relied on its central it infrastructure and security policies 9 capita plc was responsible for group wide data protection and information security policies and for operating the core systems on which many subsidiaries stored personal data including pensions and other client records the ico found there was no evidence of internal audits of the security of the affected business units despite group policies requiring such controls 9 39 a privileged service account used by capita capita backupadmin had domain administrator rights and lacked restrictions and monitoring that would normally apply under a least privilege model three penetration tests carried out between august 2022 and early 2023 had already identified this configuration as a vulnerability but no corrective action was taken before the breach 9 timeline edit 22 march 2023 07 52 an attacker gains access to an employee device using a malicious javascript script jdmb js and then downloads the malware qakbot and cobalt strike to the device 08 00 an automatic alert was sent to capita s security operations centre 12 21 the attacker logs in to the account capita backupadmin which has administrator access 9 18 23 march 2023 13 06 capita s security platform identifies that qakbot was recovering decrypting credentials from the compromised device 9 18 24 march 2023 18 07 capita s security operations centre processes the automatic alert and quarantines the compromised device 9 18 24 28 march 2023 the attacker using the compromised account capita backupadmin uses tools like cobalt strike and bloodhound to move around the system 9 19 28 march 2023 capita notices suspicious activity on three devices and takes all offline for containment 9 19 29 march 2023 09 22 capita invokes its internal major incident management process 17 26 the attacker begins downloading files using a malware tool called systembc initially 827 25 mb of data is downloaded this eventually reaches 1 76 gb via this channel 9 19 30 march 2023 the attacker uses rclone to download around 973 gb of data from multiple capita systems 9 19 31 march 2023 the attacker deploys ransomware to over 1 000 hosts 11 and resets the passwords of all 59 359 accounts on the system 9 20 at 18 30 capita reported the incident to the ico 9 20 3 april 2023 capita releases a statement saying on friday 31st march capita plc experienced a cyber incident primarily impacting access to internal microsoft office 365 applications 2 impact and cost edit the breach had significant operational financial and reputational consequences for capita and its clients 12 systems across multiple business units were disrupted for several weeks and 59 000 accounts had password resets personal data relating to approximately 6 66 million individuals had been exfiltrated including special category data such as health and criminal record information 9 capita s annual results for the 2023 24 financial year attributed a cost of over 25 million to the incident excluding the 14 million fine 13 regulatory action edit the incident led to widespread public concern with 93 formal complaints to the ico 678 complaints received directly by capita and a high court multi party claim brought by barings law on behalf of more than 8 000 individuals 8 applying its five step fining methodology the ico treated the relevant statutory maxima as 4 of capita plc s worldwide annual turnover for the gravest infringement article 5 and 2 for cpsl s article 32 infringement and set starting points of 38 745 600 capita plc and 31 480 800 cpsl after seriousness adjustments of 40 and 65 respectively 9 both penalties were reduced by 20 for mitigating factors including steps taken to mitigate harm to data subjects and engagement with regulators and applied a further 5 uplift to capita plc for an aggravating factor reflecting its higher degree of responsibility for the group wide technical and organisational measures 9 the ico then reduced each figure by 65 at the proportionality stage citing the linked nature of the infringements the risk of double punishment capita s financial position and its admission of liability arriving at a combined total of 20 300 000 11 500 000 for capita plc and 8 800 000 for cpsl 9 the companies entered into a voluntary settlement on 10 october 2025 admitting the infringements and agreeing not to appeal the ico said it reduced the penalties further to reflect time and cost savings and earlier regulatory certainty imposing a final combined penalty of 14 000 000 8 000 000 for capita plc and 6 000 000 for cpsl for infringements of articles 5 1 f and 32 of the uk gdpr 9 john edwards the uk information commissioner was quoted as saying capita failed in its duty to protect the data entrusted to it by millions of people the scale of this breach and its impact could have been prevented had sufficient security measures been in place 11 adolfo hernandez ceo at capita responded to the fine following an extended period of dialogue with the ico over the last two years we are pleased to have concluded this matter and reach today s settlement the capita team continues to focus tirelessly on our group transformation journey for the benefit of our customers our people and wider society 11 in february 2026 the high court allowed a group action brought by barings law on behalf of more than 8 000 claimants affected by the breach to proceed after the judge rejected capita s application to strike out the claims as an alleged abuse of process 8 references edit prescott katie 21 april 2023 capita admits data breach after attack by russian hackers the times 1 2 makortoff kalyeena 3 april 2023 capita blames cyber attack for outage as company races to restore it systems the guardian issn 0261 3077 retrieved 13 november 2025 makortoff kalyeena 20 april 2023 capita admits customer data may have been breached during cyber attack the guardian cumbo josephine 12 may 2023 leading pensions client warns data for 470 000 members at risk from capita hack financial times retrieved 13 may 2023 dead link davies rob 12 may 2023 capita cyber attack uss pension fund members details may have been stolen the guardian retrieved 14 may 2023 capita hack 90 organisations report data breaches to watchdog bbc news 29 may 2023 retrieved 29 may 2023 partridge joanna 4 august 2023 cyber attack to cost outsourcing firm capita up to 25m the guardian issn 0261 3077 retrieved 13 november 2025 1 2 3 ingham amy 9 february 2026 high court clears way for thousands to pursue capita data breach claims business matters archived from the original on 13 february 2026 retrieved 13 february 2026 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 monetary penalty notice capita plc capita pension solutions limited penalty notice information commissioner s office 15 october 2025 retrieved 26 december 2025 thousands of pension holders to sue capita over russia linked hack barings law retrieved 15 november 2025 1 2 3 4 jones connor 15 october 2025 capita fined 14m after 58 hour delay exposed 6 6m records the register situation publishing retrieved 15 november 2025 partridge joanna 4 august 2023 cyber attack to cost outsourcing firm capita up to 25m the guardian issn 0261 3077 retrieved 13 november 2025 capita says cyberattack contributed to annual loss of more than 106 million therecord media retrieved 17 november 2025 v t e hacking in the 2020s 2010s timeline of security hacking incidents timeline of computer viruses and worms major incidents 2020 blueleaks twitter account hijacking european medicines agency data breach nintendo data leak united states federal government data breach easyjet data breach vastaamo data breach windows xp service pack 1 and server 2003 rtm source code leaks 2021 microsoft exchange server breach ivanti pulse connect secure data breach colonial pipeline ransomware attack health service executive ransomware attack waikato district health board ransomware attack jbs s a ransomware attack kaseya vsa ransomware attack transnet ransomware attack epik data breach fbi email hack national rifle association ransomware attack banco de oro hack iranian fuel cyberattack 2022 ukraine cyberattacks red cross data breach anonymous and the russian invasion of ukraine viasat hack ddos attacks on romania costa rican ransomware attack lastpass vault theft shanghai police database leak grand theft auto vi content leak optus data breach 2023 munster technological university ransomware attack capita data breach evide data breach moveit data breach insomniac games data breach operation triangulation cyberattack british library cyberattack 2024 xz utils backdoor kadokawa and niconico change healthcare ransomware attack ukrainian cyberattacks against russia 2024 wazirx hack trump campaign hack fur affinity domain hijacking irleaks attack on iranian banks internet archive data breach i soon leak 2024 global telecommunications hack 2024 national public data breach 2025 cyberattacks on bank sepah 2025 paraguay ransomware attack 4chan hacking and data breach 2025 st paul cyberattack jaguar land rover cyberattack collins aerospace cyberattack 2025 cyberattack on polish power grid 2026 aura security data breach managemyhealth data breach neighbourly data breach cyberwarfare during the 2026 iran war 2026 canvas data breach 2026 openai agent cyberattacks 2026 minnesota water system cyberattack meccha chameleon malware incident grand theft auto vi content leak 2026 ancpi hack hacking groups anonymous associated events anonymous sudan berserk bear blackcat clop cozy bear darkmatter darkside dark storm team dridex ghostwriter gnosticplayers guacamaya hafnium indian cyber force it army of ukraine killnet lapsus lightbasin lockbit oceanlotus pampaleaks revil rhysida sandworm sakura samurai shinyhunters siegedsec vice society wizard spider ai organizations whose ais committed autonomous hacks anthropic google deepmind google ai meta ai openai individual hackers graham ivan clark maia arson crimew intelbroker kirtaner major vulnerabilities publicly disclosed smbghost 2020 thunderspy 2020 printnightmare 2021 forcedentry 2021 log4shell 2021 account pre hijacking 2022 retbleed 2022 downfall 2023 logofail 2023 reptar 2023 terrapin 2023 gofetch 2024 sinkclose 2024 copy fail 2026 malware adrozek covidlock drovorub predator blacklotus cyclops blink pipedream akira gayfemboy bootkitty techniques clickfix retrieved from https en wikipedia org w index php title 2023_capita_data_breach oldid 1377013978 categories cyberattacks 2023 crimes in the united kingdom 2023 data breaches hidden categories articles with short description short description is different from wikidata good articles use dmy dates from september 2026 all articles with dead external links articles with dead external links from september 2026 this page was last edited on 27 september 2026 at 12 46 utc page was rendered with parsoid text is available under the creative commons attribution sharealike 4 0 license additional terms may apply by using this site you agree to the terms of use and privacy policy wikipedia is a registered trademark of the wikimedia foundation inc a non profit organization privacy policy about wikipedia disclaimers contact wikipedia legal safety contacts code of conduct developers statistics cookie statement mobile view search search toggle the table of contents 2023 capita data breach 1 language add topic