Capita Cyber Attack in March 2023

 

Capita Cyber Attack in March 2023

    Capita plc is an international business process outsourcing and professional services company in London. It is the Largest business process outsourcing and professional services company in the United Kingdome. It holds the largest market share in the United Kingdom, accounting for 29% in 2016. 

On March 31, 2023, Capita plc experienced a significant cyber attack that left its systems offline and raised concerns about the security of its clients' data. This blog post provides a detailed timeline of the events surrounding the attack and its aftermath. 

            This attack began on march 22, 2023, when the Black Busta ransomware gang gained access to capita's system. The BlackBusta ransomware gang is a cybercriminal group known for its involvement in ransomware attacks. They operate by encrypting the data of their victims and demanding ransom payments in exchange for decryption keys or tools that allow the victims to regain access to their files. Like many ransomware groups, BlackBusta's primary motive is financial gain through extortion. For this, the balck busta gang used modern methods and could not identify this attack until march 31. During that time black busta has used variouse methods to gain access and maintain access to the capital network.

    

               However,  Capita later discovered the issue and announced it to the public. The company initially described the incident as a technical issue affecting internal applications, but did not confirm whether it was a cyber attack or a data breach. Over the next two weeks, capita continued to issue statements and on 17th April 2023, the Black Busta gang claimed responsiblity for the attack at the event itself. They later published the stolen data on their dark web leak site. This comfirmed that the incident was indeed a ransomware attack. 

               Capita's investigation revealed that the attack had been ongoing since March 22, 2023, and that some data had been exfiltrated. The company assured that it would notify any affected parties in a timely manner. The UK Information Commissioner's Office (ICO) and the Pensions Regulator have also become involved in the incident, urging clients to assess the potential impact on their data. 

                 The attack had significant financial impact on Capita. It reported a net loss of $135.6 million for 2023 due to the financial breach. More than 4.3 million members of pension schemes were affected by the move due to distruption of services and risk to pension payments. And also Around 90 organizations reported breaches of personal data held by Capita. The company’s systems manage pension funds for major firms like Royal Mail and Axa, exposing sensitive information. This breach raised concerns about data security and potential fraud risks for victims. Capita worked closely with specialists to investigate and secure the compromised data. The company also had to spend an amount between 15-20 million pounds to recover the company.

                The Capita cyber attack in March 2023 was a significant incident that highlights the importance of robust cybersecurity measures and timely incident response. As the incident continues to unfold, it is crucial for clients and stakeholders to remain vigilant and take steps to protect their data.

                                                                   - 13/06/2024

                                                                   -Maneesha Dewmina

                                                                 (Undergraduate of Cicra campus,  BSC Cyber security)