GBICO15 October 2025GDPR

Capita plc and Capita Pension Solutions Ltd

ICO fines Capita plc and Capita Pension Solutions Ltd £14m for data breach.

EUR€16,083,000

Country: GB
Authority: ICO
Type: GDPR
Imposed: 15 October 2025
Added to register: 25 June 2026

Summary

The UK Information Commissioner’s Office fined Capita plc and Capita Pension Solutions Ltd a combined £14m after a cyber attack in April 2023. Hackers gained access to the data of more than 6 million people. The case highlights serious weaknesses in data protection and incident response.

Grounds for the decision

Insufficient data protection after a cyber attack that exposed the data of over 6 million people.