Superannuation Arrangements of the University of London

SAUL, the Superannuation Arrangements of the University of London, is the pension scheme that provides retirement benefits to employees of the University of London and its constituent colleges. It operates as a defined benefit arrangement, aiming to deliver predictable pension income based on members’ salary and length of service. The scheme is administered by a board of trustees that includes equal representation from employer and member nominees, ensuring balanced oversight. Its core function is to collect contributions, manage investments, and pay out pensions to eligible members when they retire.

The scheme covers over 68,000 pension scheme members, a figure highlighted by the personal data exposure incident reported in May 2023. Its headquarters are located in the United Kingdom, and it serves staff across the various institutions that make up the University of London federation. While specific asset values are not disclosed in the available sources, SAUL is recognised as one of the larger university‑based pension arrangements in the UK. Membership encompasses academic, administrative, and support staff drawn from multiple colleges, institutes, and central university bodies.

SAUL distinguishes itself as a multi‑employer pension scheme, pooling resources from several affiliated organisations to achieve economies of scale and stronger risk diversification. It operates under the regulatory supervision of the UK Pensions Regulator, adhering to statutory funding, governance, and disclosure requirements. The scheme’s investment strategy focuses on long‑term growth and liability matching to secure future pension payments. Trustee governance includes regular reporting to members and transparent decision‑making processes designed to protect beneficiaries’ interests.

Structurally, SAUL is an independent trust established specifically for the University of London community and is not a subsidiary of any parent corporation. Participating employers include the University of London itself and its member colleges, which make regular contributions on behalf of their staff. The trustee body holds fiduciary responsibility for the scheme’s assets and reports to both members and regulators. Funding comes from a combination of employer and member contributions, supplemented by returns generated from the scheme’s investment portfolio.

In May 2023 SAUL was victim to a cyberattack that exploited a zero‑day vulnerability in the MOVEit file transfer software, an incident attributed to the Clop ransomware group. The breach resulted in the exposure of personal information for over 68,000 pension scheme members and formed part of a wider global campaign affecting numerous organisations. Following the attack, SAUL activated its incident response plan, which included notifying affected individuals, cooperating with law‑enforcement and regulatory authorities, and implementing additional security measures. The event underscored the critical need for robust cybersecurity controls within pension administration environments.