Capita Hack - Class Action Lawsuit

engagedandopen

I was really disgusted and troubled recently to receive a letter informing me that Capita – a pension administrator which the pension provider selected – has left my personal data unguarded and that it is has been affected by a 'cyber incident'.

I understand from the media that this was through an Amazon cloud storage area that did not even have password protection, and that Capita detected access and stopped it not because of any competency on the part of Capita, but because it was a ransomware attack, which Capita paid.

I would like to know whether anyone has already started a legal challenge against Capita, and whether this can be turned into a class action lawsuit so that all policyholders can benefit from it.

One aspect of redress must be that one year of Identity Plus membership of Experian is insufficient; this should be life-long protection and and it should be for all relevant credit agencies, not just Experian.

QrizB

There's a 40-post thread on the Capita hack, see here:

https://forums.moneysavingexpert.com/discussion/6443540/capita-hacked

Prism

The AWS bucket being left open was a different issue and did not contain the pension data - that was stolen and I believe encrypted by a hacking group. It will depend on an investigation I assume as to what Capita's penalty will be.

retiringtoosoon

I for one will jump on this class action lawsuit too. Love a bit of compo me.
question: does one have to have been affected by this hack to join the lawsuit? I’ve no relationship with Capita.

MK62

retiringtoosoon said:

I for one will jump on this class action lawsuit too. Love a bit of compo me.
question: does one have to have been affected by this hack to join the lawsuit? I’ve no relationship with Capita.

It's usually a precondition tbh....😉

Linton

MK62 said:

retiringtoosoon said:

I for one will jump on this class action lawsuit too. Love a bit of compo me.
question: does one have to have been affected by this hack to join the lawsuit? I’ve no relationship with Capita.

It's usually a precondition tbh....😉

So you must have incurred some financial loss?

retiringtoosoon

I’ll sign up in any case. Thanks

flaneurs_lobster

retiringtoosoon said:

I’ll sign up in any case. Thanks

Good plan. It's very likely that, since Capita run a good chunk of the IT for the UK Government (National and Local), the NHS, pension schemes and other stuff, that your details will be on their systems somewhere (and now all over the Dark Web, possibly)

Prism

Need to prove that Capita was negligent in some way. Being hacked is not proof of that alone.

MK62

Linton said:

MK62 said:

retiringtoosoon said:

I for one will jump on this class action lawsuit too. Love a bit of compo me.
question: does one have to have been affected by this hack to join the lawsuit? I’ve no relationship with Capita.

It's usually a precondition tbh....😉

So you must have incurred some financial loss?

Not necessarily.......but you usually have to been affected in some way or it might be difficult to persuade a court that you have any reasonable grounds for a claim.

Sarahspangles

Prism said:

Need to prove that Capita was negligent in some way. Being hacked is not proof of that alone.

This is the ICO’s bit