The UK Legal Aid Agency suffered a major cyberattack, resulting in the theft of significant sensitive data, including criminal records dating back to 2010. The attack is believed to have stolen a substantial amount of data, potentially affecting 2.1 million records. The stolen data includes highly sensitive personal details of legal aid applicants, such as contact information, dates of birth, national identification numbers, criminal histories, employment statuses, and financial data. The attack also compromised information related to barristers, solicitors, and various organizations working with the Legal Aid Agency. As a result, the agency's online digital services have been taken offline.
Source: https://hackread.com/uk-legal-aid-agency-cyberattack-sensitive-data-stolen/
TPRM report: https://scoringcyber.rankiteo.com/company/the-legal-aid-agency
"id": "the858052025",
"linkid": "the-legal-aid-agency",
"type": "Breach",
"date": "5/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2.1 million records',
'industry': 'Legal',
'location': 'United Kingdom',
'name': 'UK Legal Aid Agency',
'type': 'Government Agency'}],
'data_breach': {'number_of_records_exposed': '2.1 million',
'personally_identifiable_information': ['contact information',
'dates of birth',
'national '
'identification '
'numbers'],
'sensitivity_of_data': 'highly sensitive',
'type_of_data_compromised': ['contact information',
'dates of birth',
'national identification numbers',
'criminal histories',
'employment statuses',
'financial data',
'information related to '
'barristers, solicitors, and '
'various organizations']},
'description': 'The UK Legal Aid Agency suffered a major cyberattack, '
'resulting in the theft of significant sensitive data, '
'including criminal records dating back to 2010. The attack is '
'believed to have stolen a substantial amount of data, '
'potentially affecting 2.1 million records. The stolen data '
'includes highly sensitive personal details of legal aid '
'applicants, such as contact information, dates of birth, '
'national identification numbers, criminal histories, '
'employment statuses, and financial data. The attack also '
'compromised information related to barristers, solicitors, '
'and various organizations working with the Legal Aid Agency. '
"As a result, the agency's online digital services have been "
'taken offline.',
'impact': {'data_compromised': ['contact information',
'dates of birth',
'national identification numbers',
'criminal histories',
'employment statuses',
'financial data',
'information related to barristers, '
'solicitors, and various organizations'],
'downtime': 'online digital services have been taken offline',
'systems_affected': 'online digital services'},
'title': 'UK Legal Aid Agency Cyberattack',
'type': 'Data Breach'}