Theregister Capita's Civil Service Pension Portal Data Breach Exposes Member Information
Article Content
- •Capita's data breach affected 138 members of the Civil Service Pension Scheme.
- •The breach exposed personal data for about 35 minutes on March 30, 2026.
- •The Cabinet Office is assessing the situation and may take further action.
On March 30, 2026, Capita reported a data breach affecting its Civil Service Pension Scheme (CSPS) member portal, which exposed the personal data of 138 public sector workers for approximately 35 minutes. The breach allowed some members to access Annual Benefit Statements (ABS) that did not belong to them. Capita immediately suspended the ABS functionality and initiated an investigation into the incident. All affected members were notified by April 3, 2026. The Cabinet Office is closely monitoring the situation and may take further action. This incident marks Capita's second data breach in three years, raising concerns about its capability to manage the pension scheme effectively. The Public and Commercial Services Union (PCS) criticized Capita's handling of the situation, emphasizing the need for the government to consider insourcing the service. The breach comes amid ongoing issues with the pension portal's functionality and a significant backlog of cases inherited by Capita.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Capita in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…