Legal Aid Agency cyberattack: Compromised data goes back to 1978
The UK Legal Aid Agency says its 2025 cyberattack exposed records dating to 1978, including about 250,000 pre-2007 files.
The UK Legal Aid Agency completed analysis of its April 2025 cyberattack and said compromised records reach back to 1978. Most affected data covers applications, claims, or payments from January 2007 through 16 May 2025, or cases live in that period. About 250,000 records predate 2007. ShinyHunters claimed the attack and was served with an injunction, but the government said the claim was unverified and the data was never leaked.
- Compromised Legal Aid Agency data now confirmed back to 1978.
- About 250,000 records predate 2007; most cover 2007 to May 2025.
- ShinyHunters claimed responsibility; the government says that is unverified.
- Stolen data was never leaked; an injunction sought to block publication.
Full article728 words · extracted from databreaches.net · click to collapse
The Office of Inadequate Security
Legal Aid Agency cyberattack: Compromised data goes back to 1978
Posted on October 15, 2026 by Dissent
Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site:
A new update on the Legal Aid Agency data breach has revealed that the data which was compromised in a cyberattack in 2025 goes back as far as 1978.
The LAA on Wednesday announced it had completed analysis to establish more precisely what data was exfiltrated during the attack, including the date range and the type of information affected.
The agency said in an updated notice on the breach that the vast majority of the data relates to applications, claims or payments submitted to the LAA between January 2007 and 16 May 2025, or to cases that were live during this period.
However, the agency said it has now confirmed that approximately 250,000 records predate 2007.
Read more at Civil Service World.
The government’s full update can be found on gov.uk.
