Information regarding the data breach at the legal Aid Agency.
As we understand it, the Legal Aid Agency (LAA) encountered a cyber security incident in April 2025 whereby its digital platforms were hacked. The Agency had initially thought this low risk and with minimal loss but it appears that, over the last few days, it has since determined that this actually resulted in a high amount of personal data being compromised. The Ministry of Justice said the agency’s services were hacked in April and data dating back to 2010 was downloaded and covers all areas of the aid system – including domestic abuse victims, those in family cases and others facing criminal prosecution.
“This data may have included… addresses of applicants, dates of birth, national ID numbers, criminal history, employment and financial data such as… debts and payments,” the Ministry of Justice has said.
Full details are still being determined by the Ministry of Justice and further information will become available over the coming days and weeks but clearly this may impact on a number of our clients who currently, or historically, have received Legal Aid funding.
In the meantime, the Ministry of Justice has advised “all members of the public who have applied for legal aid in this time period to take steps to safeguard themselves. We would recommend you are alert for any suspicious activity such as unknown messages or phone calls and to be extra vigilant to update any potentially exposed passwords. If you are in doubt about anyone you are communicating with online or over the phone you should verify their identity independently before providing any information to them.”
As this data breach was not caused by the firm, we unfortunately cannot provide clients with any more information about what data has been breached, the level of harm caused as a result, or even what any clients that have received legal aid funding can do at this stage and any enquiries will need to be directed to the Legal Aid Agency directly.
Further information can be found on the Government’s website Legal Aid Agency data breach – GOV.UK
The National Cyber Security Centre also publishes information on steps to take to protect yourself following a data breach Data breach guidance for individuals – NCSC.GOV.UK
