6.6 million people were impacted by the 2023 Capita data breach. If you had a pension with an affected provider, you could be eligible to join a compensation claim.
*Our partner law firms work on a no-win, no-fee basis. You’ll only pay if your claim succeeds. Fees may apply if you cancel after the cooling-off period or breach your agreement. All terms are clearly explained before joining. Join the Claim isn’t a law firm, we help connect you with a regulated UK firm running this group action.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
No-win, no-fee*
Expert help
Save time
Get compensation
Overview
In 2023, Capita, a company that provides admin and support services to 450 UK pension providers was hacked. As a result, 6.6 million pension holders may have had their data breached.
The ransomware group targeted Capita’s Microsoft Office 365 software, pilfering personal information like names, birthdates, National Insurance numbers, and sensitive financial details.
In 2025, the Information Commissioner’s Office (ICO) fined Capita for the breach.
The watchdog said Capita “failed to ensure the security of processing of personal data, which left it at significant risk”. Initially, the fine was set at £45 million, but it was later reduced to £14 million.
None of this fine will go to victims of the breach.
If you’ve received confirmation from your pension provider indicating your involvement, you might be eligible to join a Capita data breach claim.
Check your eligibility, and we’ll let you know whether our regulated UK partner law firm can take this claim forward.
Capita – At a glance
Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the businesses they trust.
Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right.
Answer a few quick questions to see if you could qualify to join the claim. It only takes a few minutes and helps confirm if you may be eligible.
We’ll show you which regulated UK law firm will handle your claim before any details are shared, so you can review their information and decide if you’d like to continue.
If you choose to proceed, you’ll complete your registration with the law firm. They’ll handle your claim on a no-win, no-fee basis and keep you updated every step of the way.*
“We have been investigating this case since the day the breach was announced, and we believe that, while Capita was hacked, poor processes within the business ultimately made a successful attack possible. To put it bluntly, Capita negligently lost the confidential data. If we are right, and security failures at Capita made this hack possible, it must be held accountable. We are already helping hundreds of victims to claim compensation for the loss and distress they are experiencing because of this hack, and we encourage anyone else involved in this shocking data protection failure to register today.”
— Kingsley Hayes, Head of Data & Privacy Litigation, KP Law
April 2026
Capita allegedly experienced another data breach, this time affecting 138 members of the Civil Service Pension Scheme.
February 2026
The High Court ruled that the Capita data breach lawsuit could go ahead.
October 2025
The ICO fines Capita £14m for the cyber-attack that exposed millions of people’s data. The watchdog said Capita “failed to ensure the security of processing of personal data which left it at significant risk”.
September 2024
Infosecurity Magazine revealed 8,000 claimants were to pursue legal action against Capita at the High Court.
August 2023
One law firm revealed that beneficiary data had also been exposed in the Capita data breach.
July 2023
The media reported that some Capita employees had their personal data stolen in the cyberattack.
May 2023
Several pension schemes came forward to confirm their members had been compromised in the Capita data breach. Capita also warned a number of other pension providers that they might have been involved in the security incident. The ICO released a statement on the Capita data breach.
March - April 2023
Cybercriminals accessed Capita’s systems in a serious cyber incident. Capita posted a statement about the data breach on its website. The Pensions Regulator (TPR) wrote to the affected pension schemes urging them to investigate how the data breach affected policy holders.
We’ll provide more updates on this case as they happen.
Check your eligibility to find out if you could be owed compensation by joining the legal action.
Capita experienced a cyber-attack in March 2023. The Russian-based ransomware group Black Basta was likely responsible. Capita provides services to hundreds of UK pension providers. The customers of these pension providers, and their beneficiaries, may have had their data accessed because of the Capita data breach.
The following personal data could be compromised:
6.6 million people could be affected by the Capita data breach. Check your eligibility to find out if you could be owed compensation by joining the legal action.
We cannot say how much compensation you might get if you join and win a Capita data breach case. Each claim is based on its merits, and your solicitor will work to get the compensation owed to you.
In the UK, if a group of people have experienced loss, or otherwise been harmed by an organisation’s law breaking, they can come together to fight for justice. Levelling the playing field when standing up to big businesses, group actions prove that there is strength in numbers. At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
A no-win, no-fee agreement means you don’t pay your solicitor’s legal fees if your claim is unsuccessful. This makes it easier and more affordable to take part in group litigation. However, T&Cs apply. Want the full picture, including what to check before signing? Read our complete guide to no win, no fee agreements here.
No, we’re not a law firm. We help individuals find and join group action claims being run by our partner UK law firms.
We won’t charge you a single penny. And we ensure any law firms we connect you with operate on a no-win-no-fee basis.
However, fees may apply if you cancel after the cooling-off period or breach your agreement. If you win, the law firm will either take its fees from your compensation payment or recover them from the defendants.
All terms are clearly explained before joining.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |
