Legal Aid Agency (Victim): news timeline & CVEs

UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978

The UK Legal Aid Agency says hackers stole far older records than disclosed, including about 250,000 predating 2007 and one from 1978.

The UK Legal Aid Agency said forensic work shows a cyberattack copied far more data than disclosed in May 2025. About 250,000 records predate 2007, mostly from the 1990s and 2000s, with the earliest verified record from 1978. Stolen material can include identities, National Insurance numbers, financial assessments, bank and property details, partially redacted card data, and names of judges and lawyers. Probation data was also taken. Hackers claimed more than 2 million people's data and demanded payment, but the ministry says it has no indication the data has been published.

The RecordOct 15, 14:30 UTC · 1d agoData breach in the wild 7 sources1· 1 read

UK Legal Aid Agency Hack Scope Widens After Forensic Review

Forensic review finds the UK Legal Aid Agency breach reached records from 1978 and some probation and practitioner data.

The UK Legal Aid Agency said an April 2025 breach reached records dating to 1978 after a lengthy forensic review. Most compromised material relates to applications, claims, and payments from 2007 through 2025, but about 250,000 records are older. Applicant data may include names, addresses, dates of birth, National Insurance numbers, phone numbers, and Client and Cost Management System entries. Attackers also took practitioner contracts, payment details, and user credentials, plus limited probation data for offenders managed from 2010 to 2017. The agency says it has no evidence the data was published or sold.

SecurityWeekOct 15, 14:22 UTC · 1d agoData breach in the wild 7 sources1

Hackers Steal UK Legal Aid Records Dating Back to 1978 in Major Cyberattack

The UK Legal Aid Agency says its 2025 breach exposed records dating to 1978, including about 250,000 older files.

The UK Legal Aid Agency said forensic work shows its April 2025 cyberattack exposed far older material than first reported, including about 250,000 records from before 2007 and a verified record from 1978. Most affected data concerns legal-aid applications, claims, or payments from January 2007 through May 16, 2025. Exfiltrated provider information may include contracts, payment details, bank account names and numbers, sort codes, and portal usernames and emails. A small set of HM Prison and Probation Service records from 2010 to 2017 was also taken; the agency says it has no indication the data has been published.

GBHackersupdated Oct 15, 14:30 UTC · 1d agofirst Oct 15, 13:07 UTC · 1d agoData breach 7 sources1

Legal Aid Agency cyberattack: Compromised data goes back to 1978

The UK Legal Aid Agency says its 2025 cyberattack exposed records dating to 1978, including about 250,000 pre-2007 files.

The UK Legal Aid Agency completed analysis of its April 2025 cyberattack and said compromised records reach back to 1978. Most affected data covers applications, claims, or payments from January 2007 through 16 May 2025, or cases live in that period. About 250,000 records predate 2007. ShinyHunters claimed the attack and was served with an injunction, but the government said the claim was unverified and the data was never leaked.

DataBreaches.netupdated Oct 15, 14:30 UTC · 1d agofirst Oct 15, 12:18 UTC · 1d agoData breach 7 sources2· 1 read

Legal Aid Agency hackers made off with records dating back to 1978

UK officials say Legal Aid Agency hackers stole about 250,000 records, some dating to 1978, plus probation data.

The UK government says the April 2025 Legal Aid Agency intrusion was broader than first disclosed, with about 250,000 stolen records dating from before 2007 and one back to 1978. Compromised legal-aid data can include names, addresses, dates of birth, National Insurance numbers, financial details, and criminal-case information. Further review found access to HM Prison and Probation Service records for offenders supervised between 2010 and 2017, mostly from 2016 and 2017, and not victim records. Officials say there is no indication the data has been published, and the Ministry of Justice reports tighter access controls and legacy-system work.

The Register · Securityupdated Oct 15, 14:30 UTC · 1d agofirst Oct 15, 11:23 UTC · 1d agoData breach in the wild 7 sources

UK Legal Aid Agency: Hackers stole records dating back to 1978

UK Legal Aid Agency says April 2025 hackers stole records dating to 1978, including about 250,000 pre-2007 files.

The UK Legal Aid Agency says attackers who breached its systems in April 2025 stole records dating to 1978. Most exfiltrated data concerns applications, claims, or payments from January 2007 through 16 May 2025, but about 250,000 records predate 2007, overwhelmingly from the 1990s and 2000s. The trove includes applicant contact details, dates of birth, national ID numbers, criminal history, finances, and legal-aid provider data, including portal credential details. The Ministry of Justice says there is no evidence the data has been published and is investing more than £200 million in modernizing and securing legal-aid digital services.

BleepingComputerupdated Oct 15, 14:30 UTC · 1d agofirst Oct 15, 08:06 UTC · 1d agoData breach 7 sources1· 1 read

Legal Aid Agency

Timeline6 articles

Appears with