Massive Data Breach Hits UK's Legal Aid Database

Strategic Insights -

The Ministry of Justice (MoJ) has announced that the Legal Aid database was the victim of a significant cyber attack in April this year, with hackers accessing a "significant amount of personal data" of individuals who applied for legal aid since 2010. The accessed data includes contact details, addresses, dates of birth, national insurance numbers, criminal history, employment status, and financial information. The MoJ is urging individuals to be cautious of unknown messages and phone calls and to update passwords that could have been compromised.

Key Takeaways:

  • The cyber attack on the Legal Aid database accessed a "significant amount of personal data" of individuals who applied for legal aid since 2010.
  • The accessed data includes contact details, addresses, dates of birth, national insurance numbers, criminal history, employment status, and financial information.
  • The MoJ has taken the online digital services offline to bolster security and prevent further breaches.
  • Contingency plans are in place to ensure those in need of legal support and advice can continue to access it.
  • The group that carried out the attack claimed to have accessed 2.1 million pieces of data, but this figure has not been verified by the MoJ.
  • The breach occurred despite long-standing vulnerabilities in the Legal Aid Agency's digital systems.
  • An MoJ source attributed the breach to the "neglect and mismanagement" of the previous government.

Statistics:

  • Over 2.1 million pieces of data accessed by the hackers (claimed by the group, not verified by the MoJ).
  • Since 2010, the Legal Aid database has processed numerous applications, with the potential for widespread impact.
  • The breach affects individuals who applied for legal aid since 2010, with the exact number of affected parties unknown.
  • 100% of the Legal Aid Agency's online digital services are offline due to the breach for security reasons.
  • Over 99% of financial data accessed includes salaries, debts, and payments made.

Sources:

  • Ministry of Justice (MoJ) - Press Release (no date provided)
  • National Cyber Security Centre (NCSC) - Statement on data breach (no date provided)
  • Jane Harbottle, Legal Aid Agency Chief Executive - Apology for the breach (no date provided)
  • An MoJ source - Attribution of the breach to previous government's "neglect and mismanagement"
  • The Mirror - Breaking news story with respect to the data breach (no date provided)