A North West law firm has secured nearly 8,000 claimants in a class action against outsourcing giant Capita, following a major cyber-attack in March 2023. The Manchester-based firm, Barings Law, has criticised Capita’s handling of the breach, which was attributed to the Black Basta ransomware group. The attack affected around 90 organisations, including pension schemes, government agencies, and local authorities, and exposed the sensitive personal data of thousands.
Barings Law filed the case in the High Court earlier this year, and the firm’s Head of Data Breach, Adnan Malik, said the case represents the largest legal action ever taken against Capita. “This is a hugely significant case affecting thousands of people, and we are determined to fight for our clients,” Malik stated.
The case has experienced delays, with a hearing expected in the High Court next year. Malik explained that part of the delay is due to organisations taking longer to notify those impacted by the breach. “Some people are only just being informed that their personal data, including bank details, addresses, and employment histories, were compromised more than a year ago,” Malik said.
He added that some claimants, including pension holders, were shocked to learn about the breach months after it occurred. One such individual is Yorkshire mining veteran Alexander Mathewson, whose personal data was exposed. Mathewson discovered the attack through media reports in March 2023, three months before receiving a formal notification from his pension provider, the Mineworkers’ Pension Scheme, and Capita.
“I was fuming,” said Mathewson. “The press knew, everyone knew except for the miners whose money was at risk. It’s disgusting that we were left in the dark.”
Mathewson, now a client of Barings Law, praised the firm for its quick response and for keeping him and other claimants informed throughout the legal process. “I contacted three firms on the day I found out about the breach, and Barings was the only one that got back to me. They’ve been providing regular updates, which is great because a lot of miners, like me, are elderly and retired. We don’t always understand the technical details and put our trust in people and companies like Capita.”
While those affected by the breach continue to deal with its fallout, Capita has pressed ahead with securing new contracts. In August, the company announced a six-year renewal of its deal to administer the Royal Mail Statutory Pension Scheme from 2026. Earlier this year, Capita also confirmed a three-year contract extension with Westminster City Council.
Malik expressed disappointment that major organisations, including the UK Government, continue to trust Capita despite its poor security track record. “Capita isn’t fighting the case; they’re fighting the process,” Malik said. “They had the opportunity to compensate those affected, but they’ve chosen not to.”
Barings Law is set for a case management hearing in June next year, where Capita will present its defence. Malik reaffirmed the firm’s commitment to securing justice for all claimants, many of whom have suffered due to the company’s failure to safeguard their data.
