Finance
UK's Capita Fined $19 Million for 2023 Cyber Breach
Published by Global Banking & Finance Review®
Posted on October 15, 2025
2 min readLast updated: January 21, 2026
Add as preferred source on GoogleGlobal Banking & Finance Review®
Company
Published by Global Banking & Finance Review®
Posted on October 15, 2025
2 min readLast updated: January 21, 2026
Add as preferred source on GoogleCapita was fined $19 million for a 2023 cyber breach, highlighting increased UK regulatory scrutiny on data protection.
-Capita has been fined 14 million pounds ($18.7 million) for failing to protect personal data during a 2023 cyber attack, the British outsourcing firm said on Wednesday, as part of a settlement with the UK's privacy watchdog.
The settlement underscores rising regulatory pressure on UK firms hit by cyber attacks, amid heightened scrutiny following high-profile breaches at Marks & Spencer, Co-op and luxury carmaker Jaguar Land Rover.
"With so many cyber attacks in the headlines, our message is clear: every organisation, no matter how large, must take proactive steps to keep people's data secure," said John Edwards, UK Information Commissioner.
The Information Commissioner's Office said Capita failed to implement adequate measures to prevent privilege escalation and unauthorised lateral movement through its network, and did not respond effectively to security alerts.
Capita, which provides business support services to government and corporate clients, disclosed in 2023 that the breach compromised some data on its servers and estimated a financial impact of up to 20 million pounds.
The company now expects to record a free cash outflow of 59 million-79 million pounds for 2025, up from previous estimates of 45 million-65 million pounds. All other annual and mid-term targets remain unchanged.
"Highly significant" cyber incidents have doubled in Britain year-on-year, the head of National Cyber Security Centre (NCSC) said on Tuesday.
($1 = 0.7493 pounds)
(Reporting by Yamini Kalia in Bengaluru; Editing by Sumana Nandy)
Cybersecurity refers to the practice of protecting systems, networks, and programs from digital attacks. It involves implementing measures to safeguard sensitive data and ensure the integrity of information systems.
Data protection involves safeguarding personal data from misuse, loss, or unauthorized access. It includes legal frameworks and practices to ensure individuals' privacy rights are respected.
Compliance in finance refers to adhering to laws, regulations, and guidelines governing financial practices. It ensures that organizations operate within legal frameworks and maintain ethical standards.
Risk management is the process of identifying, assessing, and mitigating risks that could negatively impact an organization. It involves strategic planning to minimize potential losses.
Financial penalties are monetary fines imposed on organizations for failing to comply with laws or regulations. They serve as a deterrent against non-compliance and encourage adherence to legal standards.
Explore more articles in the Finance category
