The UK's data watchdog has fined outsourcing firm Capita £14m after the personal data of 6.6 million people was stolen in a cyber-attack.
The Information Commissioner's Office (ICO) said Capita "failed to ensure the security of processing of personal data which left it at significant risk".
The fine was originally set at £45m but reduced after discussions between Capita and the watchdog.
Capita's boss Adolfo Hernandez said the firm was "pleased to have concluded this matter and reached today's settlement".
He said the company had "hugely strengthened" its cyber-security resilience and was vigilant.
