Capita Cyberattack Hits UK Pension Funds

[vtqhtr413]

Content source

https://www.securityweek.com/capita-cyberattack-hits-uk-pension-funds/

The largest private pension scheme in the UK, the Universities Superannuation Scheme (USS), revealed on Friday that it had learned from Capita that information on USS members was stored on servers accessed by cybercriminals. The information, dating from 2021, include the title, initial, name, date of birth, National Insurance number, and USS member number of roughly 470,000 members. “While Capita cannot currently confirm if this data was definitively ‘exfiltrated’ (i.e., accessed and/or copied) by the hackers, they recommend we work on the assumption it was,” USS said. British newspaper The Telegraph has learned from sources that as many as 350 pension funds and millions of their members could be impacted by the Capita breach.

 

[vokeb]

For sure they were running sophos on their servers.
Sophos anti ransomware is lackluster.

 

[Trident]

For sure they were running sophos on their servers.
Sophos anti ransomware is lackluster.

Capita was a partner of Trend Micro. It’s not the first time Trend Micro business users are less than secure. Also, there is no ransomware used in this attack, data exfiltration is suspected.

Trend Micro

Capita Software

www.trendmicro.com

 

[vokeb]

Do you even look at what you post in this forum , capita is the ones who warned about the attack not the ones who protected the pension fund lol
Good luck finding videos on internet where trend micro gets encrypted compared to sophos.

 

[Trident]

Do you even look at what you post in this forum , capita is the ones who warned about the attack not the ones who protected the pension fund lol
Good luck finding videos on internet where trend micro gets encrypted compared to sophos.

Spoiler

Capita is the one who provided management services and got hacked. Through the Capita breach (which has nothing to do with ransomware) the personal details of people enrolled to pension schemes may have been exfiltrated.
Capita is a customer and partner of Trend Micro.

 

[upnorth]

Capita is facing criticism about its security hygiene on a new front after an Amazon cloud bucket containing benefits data on residents in a south east England city council was left exposed to the public web.

Colchester City Council said on Monday it had launched a probe following the discovery of the open storage bucket, and was working with Capita to fully understand the “extent of the data spill and take all necessary steps to minimize any impact on residents.” In the latest update, the council said today that Capita had been “entrusted with the crucial task” of running the end-of-year auditing services for the council tax and benefits. This, it added, included extracting data from the council’s own systems. The information exposed detailed the benefits local resident received in fiscal years 2019/20 and 2020/21. The council said in a statement:

“The data, along with similar information from other local authorities, was found on an unsecured Amazon Data Bucket controlled by Capita. Capita has confirmed that it has since been made secure and we can confirm that the data does not include any bank details.”

This latest development comes on the heels of Capita shutting down its part of its internal systems in late March after detecting a digital break-in of its infrastructure, which the outsourcing giant admitted to in early April. Russian ransomware crew Black Basta has claimed responsibility. Capita subsequently said 4 percent of its server estate had been accessed and it had some evidence of data exfiltration. It later updated investors to say around 0.1 percent of its servers has been accessed.

Last week, the UK’s largest private pension scheme said Capita had written to it to warn that details of 470,000 active, deferred and retired members was held on the servers that were accessed by the intruder or intruders. This includes names, date of birth and National Insurance numbers. The data, the Universities Superannuation Scheme added, might not have been stolen but it was laboring on the assumption that “it was.” Earlier this month, a security researcher said they found an open AWS S3 bucket of documents belonging to Capita in April, which was secured after the organization was alerted. Capita said the cloud storage contained nothing sensitive.

Another security calamity for Capita: Unsecured AWS bucket

Colchester City Council says it and others caught up in new incident, reckons benefits data of local citizens exposed

www.theregister.com