Capita has said that it is expecting to face costs of between £15m-£20m in relation to the recent cyber incident, emphasising that it has continued to work closely and at speed with advisers and forensic experts to investigate and resolve the issue.

The provider previously confirmed in April 2023 that it had experienced a cyber incident and that there was evidence of “limited data exfiltration from the small proportion of affected service estate which might include some customer, supplier or colleague data”.

The Pensions Regulator later revealed that it had written to pension schemes that use Capita as their administrator, asking trustees to speak to Capita as to whether there was a risk to scheme data, with the Financial Conduct Authority also engaging with the provider.

In the latest update on the incident, Capita reiterated that the unauthorised intrusion was interrupted by Capita, explaining that this in turn meant that the impact of the attack was "significantly restricted".

In particular, based on its own forensic work and that of its third-party providers, Capita revealed that some data was exfiltrated from less than 0.1 per cent of its server estate.

The provider stressed that it has since taken extensive steps to recover and secure the customer, supplier and colleague data contained within the impacted server estate, and to remediate any issues arising from the incident.

"Capita is working closely with all appropriate regulatory authorities and with customers, suppliers and colleagues to notify those affected and take any remaining necessary steps to address the incident," it stated.

According to the statement, Capita has also taken further steps to ensure the integrity, safety and security of its IT infrastructure to underpin its ongoing client service commitments.

The provider said that it is expecting to incur exceptional costs of approximately £15m to £20m associated with the cyber incident, comprising specialist professional fees, recovery and remediation costs and investment to reinforce Capita’s cyber security environment.

Despite the recent incident, the provider said that its underlying trading performance remains in line with expectations, with adjusted group revenue for Core Capita for the first four months of 2023 up by 4.8 per cent year-on-year, while Capita Public Service was up by 5 per cent and Capita Experience was up by 4.5 per cent.

Share Story: