The UK’s Legal Aid Agency has confirmed that personal data stolen in an April cyber attack dates back to 2007. Anyone who applied for legal aid digitally between 2007 and May 2025 may have been affected. The stolen information includes personal contact details, national ID numbers, employment and financial data, and in some cases, details about partners of applicants. The agency first discovered the breach on 23 April and has since worked with the National Crime Agency while advising the public on monitoring for suspicious activities.
The UK's Legal Aid Agency has confirmed that a data breach in April exposed information dating back to 2007, affecting legal aid applicants from that year until May 2025. This breach included contact details, birth dates, national IDs, and financial information.
Upon discovering the cyber attack on 23 April, the Legal Aid Agency took immediate steps to enhance system security and notify legal aid providers about potential data compromise.
In May, the Legal Aid Agency acknowledged that the breach was more extensive than initially recognized, revealing extensive personal data access and prompting warnings to the public about potential fraudulent activity.
Despite the investigation involving the National Crime Agency and National Cyber Security Centre, no details of the perpetrators have surfaced, and no data has yet appeared on the dark web.
Collection
[
|
...
]