Capita Data Breach: What Organisations Are Affected?

Keep an eye on the organisations impacted by the Capita breach as thousands continue to receive notifications about their personal information being affected.

In March, the largest UK outsourcing services company, Capita, was hit by a cyber attack which caused widespread disruption. Subsequently, around 90 organisations filed data breach reports to the ICO (Information Commissioner’s Office) with hundreds of thousands of people now being notified their data has been breached. 

Who is affected by the Capita breach?

While we do not know the full extent of affected organisations, below are those who have confirmed that they have been affected by the breach. We will keep this list updated as and when we have further information. *List accurate as of October 10, 2023

Pension Schemes Continued…

Severn Trent Pension Scheme
Sopra Steria Retirement Benefits Scheme
Suncor Energy UK
The Pearson Pension Plan
Wyeth Group Pension and Life Assurance Scheme 
Tarmac Pensions Limited
The Salvation Army Employees Pension Fund
The Pilots’ National Pension Fund
The Thomson Corporation Pension Trust
Travis Perkins Pension and Dependants’ Benefit Scheme
Trustee Bank of America UK Retirement Plan
Reuters Pension Fund
RS Group Pension Scheme
Rolls-Royce and Bentley 
Ross Trustees
United Business Media Pension
The Unipart Group
USS (Universities Superannuation Scheme)
Western Power Utilities 
William Hill Employer
Wincanton PLC Pension Scheme
Yorkshire & Clyde Bank

Local Authorities

Adur and Worthing Councils
Colchester Council
Coventry City Council
Derby City Council
Rochford District Council
South Staffordshire Council

Constituent benefits and PIP (Personal Independence Payment) have been exposed where local authorities are concerned. 

Investor Plans

Siemens Benefits Scheme


Gleadless Primary School & Staff 
National Concessionary Fuel scheme
VMS Automotive Group LTD 
Ecclesfield Primary School

GP data, including patient data, has been affected.
The Department of Education has confirmed that tens of thousands of primary school pupils under the STA (Standards and Testing Agency) are believed to have had their personal information ‘infiltrated’. 

Pension Schemes 

*Pension plan beneficiaries may also be affected
AC Nielsen UK
Air Liquide UK 
Anglian Water Group 
Armed Forces
Assurance Scheme
AXA UK Group
BAE Systems
BAT (British American Tobacco)
Berendsen UK {DB} Retirement Benefits Scheme
British Coal Staff Superannuation Scheme
Canon Retirement Benefit Scheme
Capita Pension & Life Assurance
CNH Pension Scheme
Commerzbank AG Pension and Life Assurance Scheme
DH & S Retirement and Death Benefits Plan
DPD My Benefits Platform 
EnerSys UK
Environment Agency 
F&C Asset Management Pension Plan
Halcrow Number 2
Hanson Industrial
ICM Computer Group Pension and 
Benenden Healthcare
ING UK Pension Fund
Iveco Limited
James McNaughton Paper Group Limited
Kelda KKGP
Lloyds (Lloyds of London)
Marks & Spencers
Mercer Defined Benefit Master Trust
MPS (Miners Pension Scheme)
Morrisons Retirement Pension Saver
Northern Food Pension Scheme
Northumbrian Water
Pfizer Pension Trustees
Portmeirion Potteries Limited 
Procter & Gamble 
Scottish & Newcastle Pension Fund
Scottish Power