Capita reaches settlement with ICO regarding 2023 cyber attack

15 October 2025

Capita reaches settlement with ICO regarding 2023 cyber attack

Capita today announces it has reached a settlement with the Information Commissioner's Office (ICO) in respect of its findings regarding the March 2023 cyber attack. The settlement includes a penalty of £14m.

Capita is committed to upholding the security of its data and protection of our systems for our clients and their customers. We regret the incident and can reaffirm that, following a detailed forensic investigation, all those identified as potentially impacted were contacted after the attack.

Adolfo Hernandez, Chief Executive Officer, Capita said:

"As an organisation delivering essential public services as well as key services for private sector clients, Capita was among the first in the recent wave of highly significant cyber-attacks on large UK companies.

"When I joined as CEO the year after the attack I accelerated our cyber security transformation, with new digital and technology leadership and significant investment. As a result, we have hugely strengthened our cybersecurity posture, built in advanced protections and embedded a culture of continuous vigilance.

"Following an extended period of dialogue with the ICO over the last two years, we are pleased to have concluded this matter and reach today's settlement. The Capita team continues to focus tirelessly on our Group transformation journey for the benefit of our customers, our people and wider society."

Reflecting the impact of the £14m penalty, we now expect free cash outflow before the impact of business exits of between £59m- £79m, with no other changes to the previous guidance of £45m- 65m. We continue to expect to be cash positive from the end of 2025. Our full year 2025 guidance, together with our medium-term targets also remain unchanged.

The Company confirms that this announcement contains inside information as defined in Article 7 of the UK Market Abuse Regulation.

For more information, please contact:

Investor enquiriesHelen Parris, Director of Investor RelationsTel: 07720 169 269Email: [email protected]

Stephanie Little, Head of Investor Relations Tel: 07541 622 838Email: [email protected]

Media enquiriesCapita external communicationsTel: 0207 654 2399Email: m[email protected] 

About Capita plc

Capita is a modern outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita's 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We play an integral role in society - our work matters to the lives of the millions of people who rely on us every day.

This announcement contains inside information for the purposes of Article 7 of the Market Abuse Regulation (EU) 596/2014, as it forms part of UK domestic law by virtue of the European Union (Withdrawal) Act 2018 ("UK MAR"). Upon publication via a Regulatory Information Service, this inside information is now considered to be in the public domain.