GBInformation Commissioner's Office10 October 2025Data protection breach
Capita plc and Capita Pension Solutions Limited
Capita plc and Capita Pension Solutions Limited fined by the ICO £14 million for UK GDPR infringements.
GBP£14,000,000
Summary
The Information Commissioner's Office imposed a £14 million fine on Capita plc and Capita Pension Solutions Limited for UK GDPR infringements linked to a March 2023 cyber security breach. The case concerned inadequate technical and organisational measures and a delayed response to security alerts.
Grounds for the decision
Insufficient security controls and delayed response to alerts after a cyberattack, causing UK GDPR infringements.