Capita Data Breach: What Organisations Are Affected?

In March, the largest UK outsourcing services company, Capita, was hit by a cyber attack which caused widespread disruption. Subsequently, around 90 organisations filed data breach reports to the ICO (Information Commissioner’s Office) with hundreds of thousands of people now being notified their data has been breached.

Who is affected by the Capita breach?

While we do not know the full extent of affected organisations, below are those who have confirmed that they have been affected by the breach. We will keep this list updated as and when we have further information. *List accurate as of January 11, 2024.

Pension Schemes
*Pension plan beneficiaries may also be affected
AC Nielsen UK
Air Liquide UK
Anglian Water Group
Armed Forces
Assurance Scheme
Atlas
AXA UK Group
BAE Systems
BAT (British American Tobacco)
Berendsen UK {DB} Retirement Benefits Scheme
British Coal Staff Superannuation Scheme
Canon Retirement Benefit Scheme
Capita Pension & Life Assurance
Clear Channel Retirement Benefits Scheme
CNH Pension Scheme
Commerzbank AG Pension and Life Assurance Scheme
ConocoPhilips
DH & S Retirement and Death Benefits Plan
Diageo
DPD My Benefits Platform
EE
EnerSys UK
Environment Agency
Experian
F&C Asset Management Pension Plan
G4S
Halcrow Number 2
Hanson Industrial
Heinz
ICM Computer Group Pension and
Benenden Healthcare
ING UK Pension Fund
Interpublic
Iveco Limited
James McNaughton Paper Group Limited
Kelda KKGP
Lloyds (Lloyds of London)
Magnet Scheme
Marks & Spencers
Mercer Defined Benefit Master Trust
MPS (Miners Pension Scheme)
MOD
Morrisons Retirement Pension Saver
Nest
Neopost
Nissan
Northern Food Pension Scheme
Northumbrian Water
OCS Group Staff Pension and Assurance Scheme
Pfizer Pension Trustees
Portmeirion Potteries Limited
Procter & Gamble
PwC
Rothesay
Safeway
Scottish & Newcastle Pension Fund
Scottish Power
Severn Trent Pension Scheme
Sopra Steria Retirement Benefits Scheme
Suncor Energy UK
The Pearson Pension Plan
Wyeth Group Pension and Life Assurance Scheme
Tarmac Pensions Limited
The Salvation Army Employees Pension Fund
The Pilots’ National Pension Fund
The Thomson Corporation Pension Trust
Travis Perkins Pension and Dependants’ Benefit Scheme
Trustee Bank of America UK Retirement Plan
Reuters Pension Fund
RS Group Pension Scheme
Rolls-Royce and Bentley
Ross Trustees
Unilever
United Business Media Pension
United Kingdom Accreditation Service Pension Scheme
The Unipart Group
USS (Universities Superannuation Scheme)
Western Power Utilities
William Hill Employer
Wincanton PLC Pension Scheme
Yorkshire & Clyde Bank

Local Authorities
Adur and Worthing Councils
Colchester Council
Coventry City Council
Derby City Council
Rochford District Council
South Staffordshire Council

Constituent benefits and PIP (Personal Independence Payment) have been exposed where local authorities are concerned.

Investor Plans
Siemens Benefits Scheme

Other
Gleadless Primary School & Staff
National Concessionary Fuel scheme
VMS Automotive Group LTD
Ecclesfield Primary School

GP data, including patient data, has been affected.
The Department of Education has confirmed that tens of thousands of primary school pupils under the STA (Standards and Testing Agency) are believed to have had their personal information ‘infiltrated’.