Massive Cyberattack on Ministry of Justice Exposes Personal Data of Millions

Strategic Insights -

A devastating cyberattack has hit the Ministry of Justice (MoJ), resulting in the theft of potentially millions of pieces of personal data from legal aid applicants. The breach, which was discovered on 23 April, has stolen sensitive information including national insurance numbers, criminal records, employment status, and dates of birth. The attackers claimed to have stolen 2.1 million pieces of data from individuals who have applied for legal aid since 2010.

The stolen data includes applicants' contact details and addresses, dates of birth, national ID numbers, criminal history, employment status, and debts. The Ministry of Justice has urged all affected applicants to take steps to safeguard themselves, including being alert for suspicious activity, updating passwords, and verifying identities independently. The MoJ is working with the National Crime Agency and National Cyber Security Centre to investigate the attack and has taken down the affected online service.

Key Takeaways:

  • The cyberattack on the Ministry of Justice's Legal Aid Agency exposed sensitive personal data of millions of legal aid applicants.
  • The stolen data includes national insurance numbers, criminal records, employment status, dates of birth, contact details, and addresses.
  • The attackers claimed to have stolen 2.1 million pieces of data from individuals who have applied for legal aid since 2010.
  • The Ministry of Justice has urged affected applicants to take steps to safeguard themselves, including being alert for suspicious activity and updating passwords.
  • The MoJ is working with the National Crime Agency and National Cyber Security Centre to investigate the attack.
  • The online service has been taken down, and contingency plans are in place to ensure those in need of legal support can access help.

Statistics:

  • 2.1 million pieces of data stolen from legal aid applicants since 2010 (claimed by attackers).
  • 2010: the year when the breach started (according to the asserted claim of the attackers).
  • April 23rd: the date the government became aware of the cyberattack.
  • Millions: the number of individuals whose personal data was exposed (estimated by the Ministry of Justice).
  • 1: the number of online service taken down by the Ministry of Justice in response to the attack.
  • 2: the number of organizations working with the Ministry of Justice to investigate the cyberattack (National Crime Agency and National Cyber Security Centre).

Sources:

  • The Independent
  • The Ministry of Justice (MoJ)
  • [No specific date] The Independent article

Note: The sources mentioned in this analysis are The Independent and The Ministry of Justice (MoJ).