As you may already be aware, our Scheme was one of many pension schemes impacted by a major cyber security breach that took place at Capita, which provides administration services to the Scheme.
Capita has now completed a detailed internal investigation into the incident. Unfortunately, in the final stages of its investigation, it has found an additional file that includes personal data for our Scheme members on a server known to have been accessed.
Capita cannot be certain that this data has been accessed, but we believe it’s appropriate to continue to act as if this is the case. We will be writing to all affected members to highlight the potential risks and to provide further information and support.
As mentioned in previous updates, Capita took immediate action to secure its systems and prevent any further unauthorised access to personal data. It has confirmed that it has taken extensive steps and it has recovered and secured any data that may be affected. Capita has and will continue to monitor the Dark Web to confirm that no data is compromised or for sale online as a result of this incident.
We take the responsibility of protecting members’ personal data very seriously. We’ve been working very closely with Capita and we’re doing everything we can to minimise any risk to you. We expect to receive a detailed report of the investigation it has completed, which will be reviewed by independent expert advisers and considered by the Trustee Board.
Once again, we would like to say how sorry we are that this has happened and for any concern it may cause. We want to reiterate that your pension remains secure.
If you have any questions, please read the updated Q&As. If you have questions that are not covered, please contact the helpline on Freephone – 0800 229 4005 or using the UK Local number that can be dialled from Ireland – 0208 629 5979. This helpline is open Monday to Friday, 8.30am-5.30pm and on Saturday 9am-2pm.
You can find information on how to spot scams on the Pension Scams page. The National Cyber Security Centre website also provides guidance that may be helpful.
As Capita’s investigation is now complete, we do not anticipate that we will need to provide any further updates to members on this incident.