[Legal Aid Agency Breach]

In this blog series we spotlight one of the stories from our cybersecurity newsletter, Beacon.

The UK Ministry of Justice (MoJ) has confirmed that cybercriminals have stolen a significant amount of personal data belonging to legal aid applicants dating back to 2010. The breach comes from an attack of the Legal Aid Agency (LAA), a government sponsored organization that enables legal aid providers to log their hours and bill the government. Legal aid is typically given to those with low income, based on a means-tested system.

The attack was initially discovered on April 23 but further investigation revealed on May 16 that the breach was more extensive than originally understood. The attackers were believed to have accessed a large volume of sensitive information on legal aid applicants.

The breached data could include names, contact details, home addresses, dates of birth, national insurance numbers, criminal histories, employment statuses, and financial information such as payment records, debts, and contributions.

While the MoJ has not confirmed the total number of individuals impacted, public records show that between April 2023 and March 2024, 288,888 legal aid applications were filed. Although it has been reported that around 2.1 million data points were stolen, this has not been verified by the MoJ.

In response to the cyberattack, the MoJ directed the public to the National Cyber Security Centre’s (NCSC) guidance on spotting and responding to scams.

"I understand this news will be shocking and upsetting for people, and I am extremely sorry this has happened," said Jane Harbottle, CEO at the LAA.

"Since the discovery of the attack, my team has been working around the clock with the National Cyber Security Centre to bolster the security of our systems so we can safely continue the vital work of the agency.

"However, it has become clear that to safeguard the service and its users, we needed to take radical action. That is why we've taken the decision to take the online service down.

"We have put in place the necessary contingency plans to ensure those most in need of legal support and advice can continue to access the help they need during this time.

"I am incredibly grateful to legal aid providers for their patience and cooperation at a deeply challenging time.

"We will provide further updates shortly."