UK Legal Aid Agency hack scope widens to records from 1978

· Cybersecurity · United Kingdom

A forensic review has widened the scope of the cyberattack on Britain's Legal Aid Agency (LAA), an executive agency of the Ministry of Justice that runs the Public Defender Service. The agency now says attackers who breached its IT systems in April 2025 stole far older and broader records than the government previously disclosed, with data dating back to 1978. Most of the compromised material relates to applications, claims and payments submitted between 2007 and 2025. The revised assessment followed post-incident forensic work, and the case has drawn attention to how long public bodies retain sensitive legal and personal records — and how slowly the full extent of a breach is understood.

Why it matters：It shows how long government agencies take to establish breach scope, and puts pressure on public-sector retention rules and victim notification duties globally.

Key points

  • Attackers breached LAA systems in April 2025.
  • Stolen records date back to 1978, far older than first disclosed.
  • Most affected data covers applications, claims and payments from 2007 to 2025.

Sources (original reporting)

More stories from this day