Capita data breach investigation update

Published: 24 August 2023

Council House exterior

The Council will be contacting individuals directly to make them aware.

On 18 May 2023 Derby City Council reported that it had been made aware of an information security incident related to one of its financial software providers, Capita.

Capita supplies the Council with a system that supports the Council Tax and Benefits service. The incident, which has also affected several other local authorities across the country, relates to data collected in early 2021.

We know this information security incident will have caused concern, and we would like to apologise to our customers. Derby City Council has investigated the incident to understand the extent of how its Council Tax and Benefits customers have been affected.

Personal data affected by the incident included names, addresses and reference numbers for Council Tax customers; as well as names, addresses, reference numbers, income and capital details relating to Housing Benefit and Council Tax Support claims in payment at the time of the breach.

The Council will be contacting individuals directly to make them aware, where there could be an increased risk.

Derby City Council’s priority is to protect individuals’ privacy rights and to ensure that personal data is protected. The Council is continuing to work with Capita and the Information Commissioner’s Office (ICO) to ensure that all appropriate actions are taken to address what has occurred.

As a precaution, the Council is advising its Council Tax and Benefits customers to be vigilant around potential risks. This includes monitoring for any suspicious or unsolicited communications, whether these are letters in the post, emails, or phone calls. You can find some useful guidance below, along with some helpful FAQs if you think you may have been affected.

· FAQ's if you think you could be affected.

· Guidance on Identity theft from the ICO 

· Guidance on Phishing: Spot and report scam emails, texts and websites. 

· Guidance on protecting yourself and your family from the NCSC 

· Action Fraud for reporting fraud or cyber-crime

Share this article…
FB   LI   TW   WA   EM