Capita reaches settlement with ICO regarding 2023 cyber attack

15 October 2025

Capita reaches settlement with ICO regarding 2023 cyber attack

Capita today announces it has reached a settlement with the Information Commissioner’s Office (ICO) in respect of its findings regarding the March 2023 cyber attack. The settlement includes a penalty of £14m.

Capita is committed to upholding the security of its data and protection of our systems for our clients and their customers. We regret the incident and can reaffirm that, following a detailed forensic investigation, all those identified as potentially impacted were contacted after the attack.

Adolfo Hernandez, Chief Executive Officer, Capita said:

“As an organisation delivering essential public services as well as key services for private sector clients, Capita was among the first in the recent wave of highly significant cyber-attacks on large UK companies.

“When I joined as CEO the year after the attack I accelerated our cyber security transformation, with new digital and technology leadership and significant investment. As a result, we have hugely strengthened our cybersecurity posture, built in advanced protections and embedded a culture of continuous vigilance.

“Following an extended period of dialogue with the ICO over the last two years, we are pleased to have concluded this matter and reach today’s settlement. The Capita team continues to focus tirelessly on our Group transformation journey for the benefit of our customers, our people and wider society.”

Reflecting the impact of the £14m penalty, we now expect free cash outflow before the impact of business exits of between £59m- £79m, with no other changes to the previous guidance of £45m- 65m. We continue to expect to be cash positive from the end of 2025. Our full year 2025 guidance, together with our medium-term targets also remain unchanged.

The Company confirms that this announcement contains inside information as defined in Article 7 of the UK Market Abuse Regulation.

For more information, please contact:

Investor enquiries
Helen Parris, Director of Investor Relations
Tel: 07720 169 269
Email: [email protected]

Stephanie Little, Head of Investor Relations
Tel: 07541 622 838
Email: [email protected]

Media enquiries
Capita external communications
Tel: 0207 654 2399
Email: m [email protected]

About Capita plc

Capita is a modern outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We play an integral role in society - our work matters to the lives of the millions of people who rely on us every day.

MFN is a regulatory news distribution service and it is approved by the Financial Conduct Authority to act as a Primary Information Provider in the United Kingdom. The service is built to easily manage all the tasks of news distribution for listed companies.

For further information, please contact [email protected] or visit Modular Finance.

View the source version on MFN: Capita reaches settlement with ICO regarding 2023 cyber attack