British outsourcing services provider Capita announced today that a cyberattack on Friday prevented access to its internal Microsoft Office 365 applications.
London-based Capita employs 50,000 specialists and offers a wide range of services for clients in the finance, IT, healthcare, education, and government sectors.
Among its customers are critical infrastructure organizations in the U.K. such as the National Health Service (NHS), the UK military, and the Department for Work and Pensions, as well as prominent companies like O2, Vodafone, and the Royal Bank of Scotland.
The cyber incident prompted the Capita on March 31 to announce an IT issue that impacted its internal systems. The company did not offer any other details about what caused the incident, though.
In a short press release today, Capita acknowledge that the outage was caused by a cyberattack. The incident occurred at 4 AM on Friday and it was discovered three hours later, when staff attempted to log into the system.
The company said that its immediate reaction successfully isolated and contained the security issue.
The disclosure informs that the attack impacted limited parts of the network and that the investigation did not find indications that data belonging to its customers, suppliers, or staff, has been exposed during the intrusion.
Capita says that the disruption only affected some services provided to individual clients, while most of its customer base didn’t experience any adverse impacts. The company has provided no details about the parties impacted by the cyberattack.
However, there are indications that the boroughs of Barnet, Dagenham, Barking, and the South Oxfordshire council – all of them clients of Capita – were impacted as they posted notifications on their websites that phone and email servers were unavailable.
Currently, Capita is working towards the complete restoration of access to Microsoft Office 365 and other client services and reports progress with this endeavor.
BleepingComputer has contacted Capita to learn more about the cyberattack and its impact but has not heard back.