Legal Aid Agency

The UK’s Ministry of Justice (MoJ) revealed a cyberattack on the Legal Aid system resulted in the theft of a 'significant amount' of data, including criminal records. The attackers accessed data dating back to 2010, potentially compromising contact details, addresses, dates of birth, national ID numbers, criminal history, employment status, and financial data of applicants. The MoJ is working with the National Crime Agency and the National Cyber Security Centre to secure systems. The Legal Aid Agency's online digital services have been taken offline, and individuals are advised to be vigilant against unknown phone calls and text messages.

Source: https://www.techradar.com/pro/security/legal-aid-database-hacked-significant-amount-of-data-and-criminal-records-stolen

TPRM report: https://scoringcyber.rankiteo.com/company/legalaidchicago

"id": "leg506052325",
"linkid": "legalaidchicago",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': ['applicants since 2010'],
                        'industry': 'Legal',
                        'location': 'United Kingdom',
                        'name': 'Legal Aid Agency',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Increased vigilance against unknown phone calls and '
                        'text messages, updating or replacing weak or reused '
                        'passwords',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 'Up to 2.1 million',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['contact details',
                                              'addresses',
                                              'dates of birth',
                                              'national ID numbers',
                                              'criminal history',
                                              'employment status',
                                              'financial data']},
 'date_detected': '2023-04-23',
 'description': 'The UK’s Ministry of Justice (MoJ) has revealed that a '
                'cyberattack on the Legal Aid system has led to the theft of a '
                "'significant amount' of data, including criminal records.",
 'impact': {'data_compromised': ['contact details',
                                 'addresses',
                                 'dates of birth',
                                 'national ID numbers',
                                 'criminal history',
                                 'employment status',
                                 'financial data'],
            'operational_impact': 'Online digital services have been taken '
                                  'offline',
            'systems_affected': ['Legal Aid online systems']},
 'investigation_status': 'Ongoing',
 'recommendations': ['Invest in stronger cyber defences',
                     'Quicker update times',
                     'Better training',
                     'Transparency when things go wrong'],
 'references': [{'source': 'BBC'}],
 'regulatory_compliance': {'regulatory_notifications': ['Information '
                                                        'Commissioner']},
 'response': {'communication_strategy': 'Recommended steps for individuals to '
                                        'protect themselves',
              'law_enforcement_notified': True,
              'third_party_assistance': ['National Crime Agency',
                                         'National Cyber Security Centre']},
 'title': 'Data Breach at Legal Aid Agency',
 'type': 'Data Breach'}