UK outsourcing giant Capita is warning customers that their data may have been stolen in the cyberattack that hit the company in early April.
In April, Capita confirmed that its staff was locked out of their accounts on Friday after a cyber-incident. Capita is one of the government’s biggest suppliers, with £6.5bn of public sector contracts. The firm signed numerous contracts with the Ministry of Defense.
The company announced it has experienced a cyber-incident affecting access to internal Microsoft Office 365 applications. The attack disrupted some services provided to individual clients, but the majority of its client services were not impacted.
Upon being aware of the incident, the firm immediately invoked their technical crisis management protocols and necessary steps were taken to successfully isolate and contain the issue. The issue was limited to parts of the Capita network and there is no evidence of customer, supplier or colleague data having been compromised.
They managed to restore Capita colleague access to Microsoft Office 365 and are in the process of restoring remaining client services in a secure and controlled manner.
On April 17, the Black Basta ransomware gang added Capita to its data leak site, claiming the theft of personal and financial data, including bank account details, physical addresses, and passport scans.
On May 5, the company published a new update that states that some data was exfiltrated from less than 0.1% of its server estate.
This week, the company informed Universities Superannuation Scheme (USS), the largest private pension scheme in the UK, that their members’ data was stolen as a result of the incident.
USS manages the pensions of over 500,000 members from UK universities and Higher Education institutions (and their families), investing £82.2 billion (over $102 billion) on their behalf.
Threat actors had access to Capita servers holding details for roughly 470,000 active, deferred, and retired members’ personal information.
The exposed data include names, dates of birth, National Insurance numbers, and USS member numbers.
Comments