UK outsourcing giant Capita fined £14m for data breach that affected six million

( October 15, 2025, 07:40 GMT | Official Statement) -- MLex Summary: UK-based outsourcing company Capita has been fined £14 million for a data breach that affected more than 6 million people in 2023. The Information Commissioner’s Office said it has fined Capita Plc £8 million and Capita Pension Solutions Ltd £6 million. Together, the two professional-services companies process personal information on behalf of more than 600 organizations providing pension schemes; the breach affected 325 of these, the ICO said in a statement on Wednesday. Its investigation found that Capita lacked adequate measures to respond to cyberattacks. The penalty follows a voluntary settlement, with Capita admitting liability and forgoing an appeal after an initial £45 million provisional fine.Statement follows. Penalty notice attached....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.

Know what others in the room don’t, with features including:

Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login

UK outsourcing giant Capita fined £14m for data breach that affected six million

Prepare for tomorrow’s regulatory change, today

Documents

Related Sections