Capita - Hacked

LHW99

I see pension companies have been warned to check whether data was stolen during the Capita hack

https://www.bbc.co.uk/news/business-65443841

The hack apparently went on for 9 days at the end of March, and while the Guardian indicates only 4% of Capita's IT was affected (https://www.theguardian.com/business/2023/apr/20/capita-admits-customer-data-may-have-been-breached-during-cyber-attack), first statements from Capita indicated they did not think information had been culled from the system 9https://www.theguardian.com/business/2023/mar/31/capita-it-systems-fail-cyber-attack-nhs-fears), although the later article indicates "data was breached".

I have tried to find a list of pensions administered by Capita (or at least those likely involved in the breach) but have not found one via Google. Does anyone know if such a list exists?

Administered schemes seem to include M&S, some Diageo schemes and some Public service ones, but at the moment available information on which may be at risk is minimal, four weeks on.

mark55man

Hello - sorry your post has not had the answer you hoped for.  I''ll just try bumping it up so its near the top of the list when people start looking in the morning 

Marcon

LHW99 said:

I see pension companies have been warned to check whether data was stolen during the Capita hack

https://www.bbc.co.uk/news/business-65443841

The hack apparently went on for 9 days at the end of March, and while the Guardian indicates only 4% of Capita's IT was affected (https://www.theguardian.com/business/2023/apr/20/capita-admits-customer-data-may-have-been-breached-during-cyber-attack), first statements from Capita indicated they did not think information had been culled from the system 9https://www.theguardian.com/business/2023/mar/31/capita-it-systems-fail-cyber-attack-nhs-fears), although the later article indicates "data was breached".

I have tried to find a list of pensions administered by Capita (or at least those likely involved in the breach) but have not found one via Google. Does anyone know if such a list exists?

Administered schemes seem to include M&S, some Diageo schemes and some Public service ones, but at the moment available information on which may be at risk is minimal, four weeks on.

There won't be such a list in the public domain, nor is there any reason such information should be publicly available - indeed, there are good reasons for it not to be. If you are concerned about your own data, it's easy enough to check with the scheme(s) concerned what steps the trustees are taking to establish if their members have been affected.

LHW99

Thanks Mark55Man & Marcon. I will see what a message on the pension website brings forth.

LHW99

A quick update if anyone is interested. Checked with my scheme, and to paraphrase their answer -

We know it happened, we know some data may have been compromised but Capita hasn't yet confirmed whether any members have been affected

NedS

Received an email from USS today confirming that USS data has been compromised.

Our technology partner, Capita, has been the target of a cyber attack, and some of the data it holds on its servers for USS has been compromised. We're confident that the robust processes we have in place ensure there is no risk of a third party accessing your pension without your permission. You can find more details on our website. We're sorry for any distress or inconvenience this issue causes you.

https://www.uss.co.uk/news-and-views/latest-news/2023/05/05122023_important-information-about-capitas-cyber-incident

flaneurs_lobster

Marcon said:

LHW99 said:

I see pension companies have been warned to check whether data was stolen during the Capita hack

https://www.bbc.co.uk/news/business-65443841

The hack apparently went on for 9 days at the end of March, and while the Guardian indicates only 4% of Capita's IT was affected (https://www.theguardian.com/business/2023/apr/20/capita-admits-customer-data-may-have-been-breached-during-cyber-attack), first statements from Capita indicated they did not think information had been culled from the system 9https://www.theguardian.com/business/2023/mar/31/capita-it-systems-fail-cyber-attack-nhs-fears), although the later article indicates "data was breached".

I have tried to find a list of pensions administered by Capita (or at least those likely involved in the breach) but have not found one via Google. Does anyone know if such a list exists?

Administered schemes seem to include M&S, some Diageo schemes and some Public service ones, but at the moment available information on which may be at risk is minimal, four weeks on.

There won't be such a list in the public domain, nor is there any reason such information should be publicly available - indeed, there are good reasons for it not to be. If you are concerned about your own data, it's easy enough to check with the scheme(s) concerned what steps the trustees are taking to establish if their members have been affected.

Certainly not comprehensive but a Google of Hartlink Portal (Capita's pension web access for members) will bring up major pensions under their admin. But as @Marcon says, best to check with your own pension(s) admin.

Umiamz

Getting fed up of companies being unable to keep personal data secure. I was head of IT Security for a large organisation at one point in my career and it really isn't rocket science.

corky23

Umiamz said:

Getting fed up of companies being unable to keep personal data secure. I was head of IT Security for a large organisation at one point in my career and it really isn't rocket science.

I agree. Diageo has confirmed that its members have been hacked. Hackers may have "you name, fund amount, NI number and address." Diageo has offered us 12 months subscription to Experian. As Diageo moved its pension admin from a well run internal group company to Capita to save money, is there a reason why they don't provide monetary compensation as my time is now wasted setting up an Experian account. Thoughts?

Umiamz

USS haven't offered anything other than apologies.

corky23

Umiamz said:

USS haven't offered anything other than apologies.

WOW that's bad!