Capita – everyone's favorite outsourcing badass – is still working to restore services for some customers after admitting the IT outage of certain services on Friday was caused by a cyber attack and efforts to contain the spread.

The shape shifting tech biz, which has £6.5 billion ($8 billion) worth of public sector contracts booked in, [1]said before the weekend that a technical problem meant staff couldn't access work IT, including Microsoft cloud accounts.

Staff told us they had no access to Capita's Azure Directory or Azure Active Directory, including VPN and Microsoft 365 services. It seems outside of Capita, customers reported issues accessing 365, Office and Teams.

[2]

The cause of that blackout was confirmed today, with [3]Capita saying via its website that on March 31 the biz "experienced a cyber incident primarily impacting access to internal Microsoft 365 applications. This caused disruption to some services provided to individual clients, though the majority of our client services remained in operation."

[4]

[5]

Capita says its security monitoring canary alerted personnel to the issue and the organization brought forth "established and practiced technical crisis management protocols."

"Immediate steps were taken to successfully isolate and contain the issue. The issue was limited to parts of the Capita network and there is no evidence of customer, supplier or colleague data having been compromised," it said.

[6]

Techies at the company worked at the weekend to restore services but normal play had not yet resumed for everyone as of this morning.

"Working in collaboration with our specialist technical partners, we have restored Capita colleague access to Microsoft Office 365 and we are making good progress restoring remaining client services in a secure and controlled manner," Capita added.

[7]Western Digital confirms digital burglary, calls in law enforcement

[8]UK Ministry of Defence takes recruitment system offline, confirms data leak

[9]Co-Operative Bank today 'terminated' Capita's outsourcing contract years before it was due to expire

[10]British teachers' pensions set to be released from Capita's grasp after nearly 30 years

Capita didn't say how or when the miscreants gained internal entry, which parts of the business were affected, or specify the customers whose services were downed. We have asked those questions and more but it told The Register it has nothing further to add.

The company, which said in its 2022 Annual Report that it employed 52,000 people, is divided into three business units: Capita Public Services, Capita Experience, and [11]Capita Portfolio .

Contracts under its belt include a [12]12-year £1 billion ($1.24 billion) contract to provide training to the Royal Navy and Marines , the [13]management of the BBC license fee worth £456 million ($565 million) and the [14]London congestion charge for £355 million ($440 million).

[15]

A wave of 415 contracts held by Capita said to be worth £700 million ($869 million) are [16]due to expire between 2022 and 2025 , so this security incident won't help the corporation's cause when it comes to renewal time. ®

Get our [17]Tech Resources



[1] https://www.theregister.com/2023/03/31/capita_confirms_it_outage/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZCr4IdG9T9k@Y2dFzTYB9gAAABc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.capita.com/news/capita-plc-update-cyber-incident

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZCr4IdG9T9k@Y2dFzTYB9gAAABc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZCr4IdG9T9k@Y2dFzTYB9gAAABc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZCr4IdG9T9k@Y2dFzTYB9gAAABc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2023/04/03/western_digital_confirms_security_incident/

[8] https://www.theregister.com/2022/03/24/ministry_of_defence/

[9] https://www.theregister.com/2021/12/02/capitas_outsourcing_contract_with_cooperative/

[10] https://www.theregister.com/2021/08/24/teacher_pensions_capita/

[11] https://www.theregister.com/2021/03/17/capita/

[12] https://www.theregister.com/2020/12/18/capita_navy_training/

[13] https://www.theregister.com/2017/07/17/70_pc_tv_licensing_convictions_women/

[14] https://www.theregister.com/2020/08/10/transport_for_london_capita_contract/

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZCr4IdG9T9k@Y2dFzTYB9gAAABc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[16] https://www.theregister.com/2022/05/31/capita_government_contracts_ending/

[17] https://whitepapers.theregister.com/