Monetary penalties
Capita plc and Capita Pension Solutions Ltd
£14mpenalty
Root cause
Cyber attack
An external attacker got in and took data. Where the ICO's notice names the specific failure that let them, the case is filed under that instead.
What happened
The Information Commissioner’s Office has fined Capita plc and Capita Pension Solutions Ltd a combined £14m following a cyber attack in April 2023 which saw hackers gain access to over 6m people’s data.
Summarised from the notice published by the ICO on 15 October 2025. Read the original notice — it is the authoritative version.