● Covered by 3 sources · 3 reportsMedium impact2 negative1 neutral
UK Legal Aid Agency Data Breach Exposed Records Dating Back to 1978
Key points
- LAA systems breached in April 2025.
- Stolen records date back to 1978.
- Sensitive data of applicants, recipients, and providers compromised.
- Approximately 250,000 records predate 2007.
- Compromised data includes legal practitioners, judges, and probation service users.
- Most compromised records are from applications, claims, and payments between 2007 and 2025.
- Compromised data includes National Insurance Numbers, postcodes, and CCMS answers.
- Justice Minister Sarah Sackman described the incident as "significant and complex".
- Hackers exploited vulnerabilities in LAA's IT systems.
Data Breach Extends to Five Decades
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice, announced that a cyberattack in April 2025 led to the theft of records spanning nearly five decades. Initial reports in early May 2025 indicated payment information for legal aid providers might have been compromised, but subsequent analysis revealed a much broader impact.
The LAA confirmed that while the majority of stolen data relates to applications, claims, or payments between January 2007 and May 2025, approximately 250,000 records predate 2007, with the earliest verified record dating back to 1978.
Compromised Information
The stolen data includes sensitive applicant and recipient information such as contact details, dates of birth, national ID numbers, criminal history, employment status, contribution amounts, debts, and payments. Additionally, legal aid providers' data was compromised, including contracts, office locations, financial information, contact details, and LAA Online Portal credentials.
Agency Response and Investment
The LAA stated that records predating 2007 do not imply that everyone who interacted with the justice system before that year was affected. A Ministry of Justice spokesperson acknowledged the concern caused by such incidents and highlighted ongoing updates to information on GOV.UK.
Prior to the cyberattack, the LAA had committed £20 million to stabilize and upgrade its digital systems. Following the breach, an additional investment of over £200 million is being made to modernize digital infrastructure.
Updates
- Compromised data includes legal practitioners, judges, and probation service users.
- Most compromised records are from applications, claims, and payments between 2007 and 2025.
- Compromised data includes National Insurance Numbers, postcodes, and CCMS answers.
- Justice Minister Sarah Sackman described the incident as "significant and complex".
- Hackers exploited vulnerabilities in LAA's IT systems.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
The UK Legal Aid Agency (LAA) cyberattack compromised significantly more data than initially reported, with stolen records now confirmed to date back to 1978. This expansion of the breach includes approximately 250,000 records predating 2007 and additional probation service data, increasing the scope of potentially affected individuals and sensitive information.
The UK Legal Aid Agency (LAA) has revealed that a data breach in April 2025 compromised records dating back to 1978, significantly expanding the scope of the incident. The breach, which initially reported exfiltrated personal information of legal aid applicants, now includes data from legal practitioners, judges, and probation service users.
The UK Legal Aid Agency (LAA) confirmed that a data breach in April 2025 resulted in the theft of records dating back to 1978, affecting sensitive applicant, recipient, and provider data. This expands the scope of the breach beyond initial estimates, revealing a longer history of compromised information.