A London-based professional services company was fined a combined 14 million GBP by the U.K. Information Commissioner’s Office following a 2023 data breach that resulted in the personal information of 6.6 million people being stolen. Both Capita PLC and Capita Pension Solutions received fines of 8 million GBP and 6 million GBP, respectively, after agreeing to a voluntary settlement with the ICO after the agency indicated it was prepared to fine the company GBP45 million. The cyberattack reportedly occurred in March 2023 when a Capita employee accidently downloaded a malicious file on a company device. Despite a “high priority” breach being raised within 10 minutes and some automated controls deployed to contain the breach, Capita did not quarantine the device for 58 hours, the ICO said.
Full story