![230628 USS capita data breach](/media/13859/230628-USS-capita-data-breach/image/230628_USS_capita_data_breach.jpg)
USS Capita data breach and Experian offer
19 June 2024
As you will know, Capita suffered a major data breach in 2023 when information on USS scheme members was exfiltrated by hackers. Information accessed included members' title, initial(s), and name, their date of birth, National Insurance number, USS member number and their retirement date.
Since UCU became aware of this, we have been engaged with USS to better understand the circumstances around the breach, what action Capita, USS and others including the Information Commissioner have and would take to protect members' personal data. This included the one-year Experian offer where members would be able to monitor how their data was being used and over 100,000 USS scheme members took up this offer.
Over the last twelve months, Capita and USS have continued to monitor the dark web for evidence that information from this breach has been used to access bank accounts or apply for loans, bank cards, etc., and they have told us that no credible evidence has been provided to show information accessed has been used in any other way.
The Experian offer will be ending now for members and so UCU has argued for some time for an extension of the Experian offer for a further twelve months to assure members and provide as much protection as possible. USS have just recently confirmed that having considered all aspects of this matter, including the cost and likelihood of data being used going forward, that they will not extend the Experian offer as 'there is still no evidence that any Capita member data is for sale on the dark web as a result of the Capita cyber incident'.
USS have also stated that employers have been fully briefed on this position and members can get help from their employer. They have also stated that there is considerable support on the USS website which has recently been updated with the following;
- new banner on USS to say that the cyber hub has been updated
- an additional line added to the cyber hub landing page to alert visitors to the new FAQs.
Members can continue with Experian but will have to pay for this themselves. Should any member believe that their USS data has been used illegally, they can still contact USS to raise concerns and can email the UCU pensions mailbox for advice.
With best wishes
Dooley Harte
UCU pensions official (USS)
- PrintPrint this page
- Share