Aviva PLC (LSE:AV.) does not think that any of its customer data was accessed by the cyber attack on Capita PLC (LSE:CPI) in March, though it is one of several major pensions and life insurance companies likely to have been contacted by the UK financial watchdog as they could have been affected by the hack.
The Financial Conduct Authority and Pensions Regulator have contacted clients of the outsourcing group to urge them to "determine whether there is a risk" to their pension scheme data, the FT has reported.
Last month, Capita confirmed that the cyberattack it reported on 3 April resulted in data on staff, customers and suppliers being stolen by the hackers.
Personal bank account details, passport photos and addresses had been leaked online and were available to buy on the dark web following the attack, according to newspaper reports.
Capita had previously claimed that people’s personal details had remained secure.
Clients include blue-chip life insurers Aviva and Phoenix Group Holdings PLC (LSE:PHNX), and bulk annuity insurers including FTSE 250-listed Just Group PLC (LSE:JUST), according to sources cited by the FT.
Aviva told the newspaper there was "no evidence currently" to suggest any of its customers’ data was accessed but that it is still working with Capita.
The outsourcer said two weeks ago that around 4% of its servers were affected by the hack, reportedly carried out by the Russian group Black Basta, and that it had taken nine days to realise it was under attack and to put a halt to it.