You may have seen in the news that Capita, who provide our administration of the EAPF, have recently experienced a cyber-attack. We understand that the incident may be concerning, but we want to reassure you that we take the responsibility of protecting our member data extremely seriously. We're actively monitoring the situation, working closely with Capita as they continue to investigate the position.
When Capita became aware of the issue, they took steps immediately to isolate and contain the issue in order to protect the data they hold from compromise. Capita have confirmed that the pension administration system hasn’t been affected by the attack.
However, their ongoing investigations have identified some evidence that a limited amount of data was compromised for some of their clients. At this point in time, we do not know yet whether any personal information for any EAPF members has been impacted. We do know our member data sits in a separate environment, outside of the system that was accessed by attackers. But what we don’t know, is whether there was any data held elsewhere which could potentially have been available when the incident happened.
We'll provide further information or advice as it becomes available.
While we continue to work with Capita to establish the facts, we ask you to stay vigilant.
- If you receive an email from the EAPF administration team, please make sure the email is from a Capita email address (either @capita.com or @capita.co.uk).
- If you receive an email from our Communications team, please make sure the email is from noreply@mail.eapf.org.uk
- If you receive an email directly from our EAPF Management team, please make sure the email is from @environment-agency.gov.uk
- Do not click on any links included in emails unless you know it is from a reliable source.
- Finally, do not provide any personal information unless it is a request from the administration team that is in direct response to an enquiry from you.
Capita are working around the clock on this issue, alongside with expert partners to ensure their systems are protected to keep our members data safe going forwards.