
The Legal Aid Agency has acknowledged a serious data breach after it became the target of a cyber attack last month.
It said it became aware of the attack on its online channels for legal aid providers to log and receive payment for services on 23 April.
The agency immediately took action to bolster the security of the system and informed all the providers that some of their details, including financial information, may have been compromised. Since then it has informed the Information Commissioner’s Office and worked closely with the National Crime Agency and National Cyber Security Centre.
It has now issued a statement, however, that it believes the group responsible for the attack has downloaded a significant amount of personal data from people who have applied for legal aid through the service since 2010.
This may have included contact details and addresses, dates of birth, national ID numbers, criminal history, employment status and financial data.
The agency has urged members of the public who have applied for legal aid since 2010 to be alert to any suspicious activity and take steps to protect themselves, such as updating any potentially exposed passwords.
Shocking and upsetting
Jane Harbottle, CEO of the Legal Aid Agency, said: “I understand this news will be shocking and upsetting for people and I am extremely sorry this has happened.
“Since the discovery of the attack, my team has been working around the clock with the National Cyber Security Centre to bolster the security of our systems so we can safely continue the vital work of the agency.
“However, it has become clear that to safeguard the service and its users, we needed to take radical action. That is why we’ve taken the decision to take the online service down.
“We have put in place the necessary contingency plans to ensure those most in need of legal support and advice can continue to access the help they need during this time.
“I am incredibly grateful to legal aid providers for their patience and cooperation at a deeply challenging time.
“We will provide further updates shortly.”