Capita finds data leak from March hack

LONDON, UNITED KINGDOM — British outsourcing giant Capita said that hackers may have accessed customer data during a cyberattack last month.

In a statement, Capita said that their investigation into the March attack found evidence of “limited data exfiltration,” which “might include customer, supplier or colleague data.”

However, the firm assured its users that they restored “virtually all client services that were impacted” and reinstated employees’ access to Microsoft 365.

Capita’s latest statement also confirms that hackers first compromised the company’s internal systems on March 22, nine days before they could interrupt the breach on March 31.

“As a result of the interruption, the incident was significantly restricted, potentially affecting around 4% of Capita’s server estate,” the statement reads. 

“Capita continues to work through its forensic investigations and will inform any customers, suppliers, or colleagues that are impacted in a timely manner.”

While Capita would not comment on the number and types of data affected by the breach, a Sunday Times report said that personal bank account details, addresses, and passport photos are now being leaked online by the hacking group Black Basta.

Capita said they continue “to work through its forensic investigations and will inform any customers, suppliers, or colleagues that are impacted in a timely manner.”

The outsourcing giant has about £6.5 billion (US$8.07 billion) worth of contracts with the UK’s public sector and employs more than 50,000 British citizens.