Legal Aid Agency Cyber Attack Exposes Records Since 1978
Article Content
- •Hackers accessed personal data records dating back to 1978 during a 2025 cyber attack.
- •The breach primarily affected data from 2007 to May 2025, including sensitive personal information.
- •No complete legal aid case records were compromised, and no evidence of data publication has been found.
In April 2025, a cyber attack targeted the Legal Aid Agency (LAA), compromising personal data of legal aid applicants and providers. The Ministry of Justice disclosed that hackers accessed records dating back to 1978, with the majority from 2007 to May 2025. The attack exploited vulnerabilities in the LAA's IT systems, leading to the exfiltration of sensitive information, including names, addresses, and financial details. While the data breach is extensive, the government has confirmed that no complete legal aid case records were affected. The LAA is working with law enforcement and cybersecurity agencies to assess the impact and has not found evidence that the stolen data has been published or shared. Legal aid providers and applicants are urged to stay informed about potential impacts on their data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track HM Prison And Probation Service in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who is affected by the data breach?
What types of data were compromised?
What actions are being taken in response to the attack?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…