UK Government Faces Cyber Attack on Legal Aid Agency, 2.1 Million Pieces of Data At Risk

Strategic Insights -

The Legal Aid Agency, an arm's length agency to the Ministry of Justice, has suffered a significant cyber attack. The breach, which occurred in April, has left 2.1 million pieces of personal data, including contact details, date of birth, employment status, and financial information, at risk. The data, which spans from 2010 to the present day, has been accessed and downloaded by the attackers. The incident is being investigated by the National Crime Agency and the National Cyber Security Centre.

Key Takeaways:

  • The cyber attack on the Legal Aid Agency has compromised 2.1 million pieces of personal data, including sensitive information such as contact details, date of birth, employment status, and financial information.
  • The breach, which occurred in April, has left the agency's online digital services, used by legal aid providers to log their work and get paid by the Government, taken offline.
  • The group behind the attack has claimed to have accessed 2.1 million pieces of data, but the Ministry of Justice has not verified this figure.
  • Legal Aid Agency chief executive Jane Harbottle has apologised for the breach and acknowledged that the agency will need to take radical action to safeguard its systems and users.
  • Contingency plans are in place to ensure that those in need of legal support and advice can continue to access it despite the attack.
  • The National Crime Agency and the National Cyber Security Centre are working together to investigate the incident and support the department.
  • The National Cyber Security Centre has published advice and guidance on how to strengthen defences on its website to help organisations manage their cybersecurity.

Statistics:

  • 2.1 million pieces of personal data, including sensitive information, accessed and downloaded by the attackers.
  • The data breach spans from 2010 to the present day, covering Legal Aid applicants who have provided personal details.
  • 100% of online digital services taken offline by the Legal Aid Agency to bolster security.
  • The incident is being investigated by the National Crime Agency and the National Cyber Security Centre.
  • The National Cyber Security Centre has provided advice and guidance on how to strengthen defences on its website.

Sources:

  • Susanna Reid, Good Morning Britain (no date, exact quote and timestamp)
  • Ministry of Justice (no date, exact quote and timestamp)
  • Jane Harbottle, Legal Aid Agency chief executive, as quoted in Good Morning Britain (no date, exact quote and timestamp)
  • National Crime Agency (no date, exact quote and timestamp)
  • National Cyber Security Centre (no date, exact quote and timestamp)