Capita plc
Approved Evidence
Capita Fined £14 Million After Data Breach Affected 6.6 Million People
In October 2025, the UK Information Commissioner's Office fined Capita plc and Capita Pension Solutions Limited a combined £14 million over data-security failures connected with a major 2023 cyberattack. The ICO said personal information belonging to approximately 6.6 million people was stolen. The compromised information included pension and staff records and, for some people, sensitive financial, criminal-record and special-category data. The regulator found failures in technical and organisational security measures, including weaknesses that enabled privilege escalation and lateral movement, inadequate responses to security alerts, and insufficient penetration testing and risk assessment. A high-priority security alert was generated shortly after the initial compromise, but the affected device was not quarantined for 58 hours. Capita acknowledged the ICO's decision and admitted liability under a voluntary settlement. Source: Information Commissioner's Office https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/10/capita-fined-14m-for-data-breach-affecting-over-6m-people/
Capita Financial Managers Publicly Censured and Agreed Up to £66 Million Redress for Connaught Investors
In November 2017, the UK Financial Conduct Authority publicly censured Capita Financial Managers Limited and announced that it would pay up to £66 million for the benefit of investors in the failed Connaught Income Fund Series 1. The FCA concluded that Capita Financial Managers failed to conduct adequate due diligence when it took over as operator of the fund and failed to adequately monitor the fund and its underlying investments afterward. The FCA said consumers were entitled to expect authorised firms to perform their responsibilities with care and diligence and stated that Capita Financial Managers had failed badly in this case. The redress arrangement was intended to return investors as closely as possible to the position they would have been in had they not invested. Source: Financial Conduct Authority https://www.fca.org.uk/news/press-releases/capita-financial-managers-pay-66-million-benefit-investors-connaught-income-fund-series-1