Massive Cyber Hack Hits Legal Aid Agency
A major cyber attack has rocked the Legal Aid Agency (LAA), exposing a treasure trove of sensitive personal data from legal aid applicants spanning the last 15 years, the Ministry of Justice (MoJ) has confirmed.
The breach became public on Monday, 19 May 2025, and may include private info like criminal records, contact details, National Insurance numbers, financial data, and employment history. The hacker gang claims to have snatched over 2.1 million pieces of data — though the MoJ has yet to verify these figures.
Security Fiasco Blamed on Government Neglect
The attack was first detected on 23 April, but officials only realised last Friday just how widespread and severe it was. An MoJ insider pointed the finger squarely at “neglect and mismanagement” by the previous government, revealing glaring security flaws in the LAA’s IT systems have been known for years.
Legal Services Slammed, Online Hub Shut Down
- Following the hack, the LAA has pulled the plug on its online services, used by legal aid providers to log cases and process payments.
- Jane Harbottle, LAA chief executive, apologised profusely, calling the breach “shocking and upsetting.” She said contingency plans are in place to keep vital legal support flowing.
“To safeguard the service and its users, we needed to take radical action,” Harbottle said. “That is why we’ve taken the decision to take the online service down.”
The Law Society slammed the agency’s “antiquated IT system” and demanded urgent government cash injection to restore faith in the justice system.
Full-Blown Investigation Underway
The National Crime Agency and National Cyber Security Centre are working closely with the MoJ to crack the case, find the source, and shore up cybersecurity.
Affected people — anyone who applied for legal aid since 2010 — are urged to change their passwords and watch out for suspicious calls, emails, or texts.
This cyber breach arrives amid a wave of high-profile hacks hitting UK giants like Marks & Spencer, Harrods, and Co-op. So far, authorities say there is no link between these incidents.
