Cyber Attack Impacts Legal Aid Services
The Legal Aid Agency in Britain has confirmed a significant cyber attack that compromised personal data of legal aid applicants dating back to 2010. The breach came to light on 23 April, and since then, the agency has been working closely with the National Crime Agency to assess the situation.
By Friday, it was discovered that the breach was more severe than initially believed. As a result, the agency took its online services offline to prevent further risk to user data.
Sensitive Information Accessed by Hackers
According to the Legal Aid Agency, the attackers may have accessed a wide range of sensitive personal details. This includes criminal records, addresses, dates of birth, national ID numbers, and financial information such as debt amounts, payments, and legal aid contributions.
Chief Executive Jane Harbottle stated, “Since the discovery of the attack, my team has been working around the clock with the National Cyber Security Centre to bolster the security of our systems so we can safely continue the vital work of the agency.”
She added, “It has become clear that to safeguard the service and its users, we needed to take radical action. That is why we’ve taken the decision to take the online service down.”
Legal Support Continues Despite Service Suspension
The Legal Aid Agency, part of the Ministry of Justice, has implemented contingency plans to ensure people in need can still access legal support. Although the online platform is currently unavailable, the agency has confirmed that services are continuing through alternative methods.
This data breach comes amid a wave of cyber attacks targeting British organisations. In April, both Marks & Spencer and the Co-op experienced attacks involving impersonated staff contacting IT support desks. Marks & Spencer reported that some customer information was taken in a ransomware attack, which forced the retailer to suspend online orders.
These incidents highlight the increasing threat posed by cyber criminals who infiltrate systems, encrypt data, and demand payment to release access.
with inputs from Reuters
