Capita
Filed here are the firms whose record of you did not begin with a sign-up. What holds the file together is the device rather than an account, so there may be nothing to log into and no delete button. The right to ask does not depend on having an account.
Reported incidents
Fined 14 million pounds after 6.6 million people's pension and staff records were stolen
2025-10-15Affected Capita Pension Solutions and corporate network
The ICO fined Capita plc 8 million pounds and Capita Pension Solutions 6 million pounds on 15 October 2025 over a March 2023 attack in which the personal data of 6.6 million people was stolen. The data came from pension records, staff records and the customers of organisations Capita serves; 325 of the 600 pension schemes it runs were hit, and some records included criminal record and financial details. A high priority alert was raised within ten minutes, but Capita took 58 hours to respond against a one-hour target. The ICO had first proposed 45 million pounds.
People affected typically ask Capita to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.