The UK Legal Aid Agency (LAA) has revealed that a cyber breach dating back to 2025 has compromised personal records extending as far back as 1978. The investigation has now shown that around 250,000 records, mostly from before 2007, were accessed, broadening the breach’s known impact on legal aid applicants, service providers, and some probation service users.
Details of the Compromised Data
In an update on October 14, 2026, the LAA stated that the majority of affected data pertained to applications, claims, and cases active from January 2007 to May 16, 2025. Older records, primarily from the 1990s and 2000s, were also compromised, with minimal data dating before 1990.
The cyberattack was initially detected on April 23, 2025, prompting immediate warnings to legal aid providers about potential data exposure, including financial details. By May 16, it was confirmed that substantial personal data had been extracted, elevating the severity of the incident.
Scope and Impact of the Breach
The breach involved various types of sensitive information, such as names, addresses, birth dates, National Insurance numbers, and financial assessments, alongside legal case details. Some records included Crown Court information like charges, pleas, and sentences, as well as data concerning family members involved in civil cases.
Data linked to benefit checks for civil legal aid from 1978 to 2012 was also compromised. Provider information, including bank account details and online portal credentials, was affected, though not every person or data field was impacted.
Security Measures and Future Implications
Despite the serious nature of the breach, the LAA has no evidence that the stolen data has been publicly disclosed. The agency has not identified the perpetrators or their methods of entry. Current security enhancements include improved authentication, restricted access, and better monitoring to prevent future incidents.
Individuals concerned about potential exposure are advised to remain vigilant for unexpected communications and verify any requests for personal or financial details independently. The UK National Cyber Security Centre advises using official channels for contact, avoiding suspicious message details, and monitoring accounts for unusual activities post-breach.
This incident underscores the critical importance of robust cybersecurity measures and highlights the broader issue of sensitive court data protection, mirroring concerns from a separate data breach involving the NSW Online Registry.
