Capita - Hacked

LHW99

A couple more updates on this - suggestions that as many as 350 pension funds and Local Government departments may be affected

https://www.bankinfosecurity.com/blogs/capita-issued-erroneous-breach-details-officials-report-p-3448

https://therecord.media/capita-data-breaches-information-commissioners-office

hyubh

shefmarkh said:

To discourage future leaks the people who caused this should be held personally responsible and pay out compensation - of course this will never happen.

Bit harsh on the Capita junior admin on £20K a year...?

p00hsticks

I've received a letter from my particular pension scheme today to tell me that my data has potentially been taken, and that Capita are offering a 12-month complimentary subscription to Identity-Plus.  

flaneurs_lobster

p00hsticks said:

I've received a letter from my particular pension scheme today to tell me that my data has potentially been taken, and that Capita are offering a 12-month complimentary subscription to Identity-Plus.  

That's good of them. Gives you a year to change your important passwords.

Not so easy is changing your:

Name
Address
DOB
NI Number
Bank Account Details
On death beneficiaries details

and probably some other stuff.

Better hope the bad people don't just sit on your details for 13 months and then have a bit of a rummage. 

Bare minimum, Capita should be funding this monitoring on an open-ended basis (and have their backsides sued off). 

Murdina

Have come to this thread as my husband and I both got letters yesterday about our pensions - we had not been following the story before then and in any event both are schemes are not ones I see mentioned in this thread - suggesting to me the extent of the hack is far larger. We have been told bank details NOT compromised  - only all the other data name address NINO etc. And the offer of monitoring for a year. The advice of flaneurs_lobster and LHW99 is what we had pretty much concluded ourselves. Is this not a topic that would merit a full article on the main website and continuing guidance and updates? Also what about pressure on pension trustees to switch away from Capita? Indeed will Capita survive (as an aside I have already seen an advert from a law firm offering to seek compensation for those hacked - presumably with them taking a share). 

shefmarkh

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

Umiamz

shefmarkh said:

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

Where does it say this? All I can see is a statement that Capita have taken extensive steps to recover and secure the data, not that they have actually succeeded.

shefmarkh

Umiamz said:

shefmarkh said:

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

Where does it say this? All I can see is a statement that Capita have taken extensive steps to recover and secure the data, not that they have actually succeeded.

Umiamz said:

shefmarkh said:

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

Where does it say this? All I can see is a statement that Capita have taken extensive steps to recover and secure the data, not that they have actually succeeded.

It’s buried in

https://www.uss.co.uk/-/media/project/ussmainsite/files/news-and-views/news-articles/capita-cyber-incident-qas-25-may-2023.pdf?rev=a3596b72f8c64ad383fe084b136b9b42&hash=D30ACB3F40D54AC7D50130C83490EC98

Universidad

shefmarkh said:

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

There is zero possibility of this ever happening with any degree of certainty. You should assume that all bad actors have access to all leaked information.

LHW99

Umiamz said:

shefmarkh said:

Uss website now is claiming Capita has secured the stolen data. But how can we be sure this is true.?

Where does it say this? All I can see is a statement that Capita have taken extensive steps to recover and secure the data, not that they have actually succeeded.

There are some rumours that a ransom may have been paid. No details on whether this relates to Capita, another company, or is only speculation.

https://www.databreachtoday.com/capita-hack-fallout-regulator-sees-breach-reports-surge-a-22179

we had not been following the story before then and in any event both are schemes are not ones I see mentioned in this thread

As Marcon suggested early in the thread, there doesn't appear to be any confirmation of which specific schemes have been affected, although the names of some are now public. Since it appears several hundred schemes may potentially be breached, there will be many that have not (yet) been discussed here.

Although my OH has had a USS letter suggesting they will be providing a 12 months subscription to a monitoring service, so far no details have been received.