UK Cabinet Office: Capita gave civil servants access to other people’s pensions data

Capita Referred to UK Information Commissioner Over Pensions Data Breach

The UK Cabinet Office has referred outsourcing firm Capita to the Information Commissioner’s Office (ICO) following a data breach that exposed civil servants’ pensions information. The incident allowed unauthorized access to sensitive data, raising concerns over the company’s handling of personal records.

Capita, which was previously fined £14 million for an earlier data leak, has faced scrutiny for its security practices. The latest breach involved civil servants gaining access to other individuals’ pensions data, highlighting potential vulnerabilities in its systems.

The referral to the ICO could lead to further regulatory action, as the watchdog assesses whether Capita violated data protection laws. The incident underscores ongoing risks in third-party data management, particularly for government contracts. No timeline for the ICO’s investigation has been disclosed.

Source: https://www.thetimes.com/business/companies-markets/article/capita-reported-regulator-civil-service-pensions-data-breach-t273s0qfd

UK Cabinet Office TPRM report: https://www.rankiteo.com/company/cabinet-office

"id": "cab1777832879",
"linkid": "cabinet-office",
"type": "Breach",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Civil servants',
                        'industry': 'Government Services',
                        'location': 'UK',
                        'name': 'Capita',
                        'type': 'Outsourcing Firm'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Pensions information'},
 'description': 'The UK Cabinet Office has referred outsourcing firm Capita to '
                'the Information Commissioner’s Office (ICO) following a data '
                'breach that exposed civil servants’ pensions information. The '
                'incident allowed unauthorized access to sensitive data, '
                'raising concerns over the company’s handling of personal '
                'records.',
 'impact': {'brand_reputation_impact': 'Raised concerns over the company’s '
                                       'handling of personal records',
            'data_compromised': 'Civil servants’ pensions information'},
 'investigation_status': 'Ongoing (ICO assessment)',
 'references': [{'source': 'UK Cabinet Office'}],
 'regulatory_compliance': {'fines_imposed': '£14 million (previous fine)',
                           'regulations_violated': 'Potential violation of '
                                                   'data protection laws',
                           'regulatory_notifications': 'Referred to the ICO'},
 'title': 'Capita Pensions Data Breach',
 'type': 'Data Breach'}