Date published: 21st May 2025

Here at Broudie Jackson Canter, we place the safety and privacy of our clients as our highest priority. I therefore want to inform you of a recent cyber-attack on the Legal Aid Agency (LAA), which may have implications for individuals who have applied for legal aid since 2010.

What Happened?

On 23 April 2025, the LAA detected a cyber-attack targeting its online digital services. These systems are used by legal aid providers to log work and receive payments. They initially believed the attack was limited in scope; however, the breach was later confirmed to be far more extensive. On 16 May, it was revealed that a significant amount of personal data had been accessed from LAA systems and downloaded by the attackers.

The compromised data may include:

  • Full names and contact details
  • Home addresses
  • Dates of birth and national ID numbers
  • Criminal history and employment status
  • Financial information such as contributions, debts, and payments

This breach potentially affects anyone who has applied for legal aid through the LAA’s digital services between 2010 and 2025.

Our Response and Advice

I understand that this news may be concerning. Please be assured that we are actively engaging with the LAA to seek urgent clarification on the following:

  • What specific items of data have been accessed
  • What information has been provided to the Information Commissioner’s Office (ICO)
  • What steps have been taken to prevent future breaches

In the meantime, whilst it is very unlikely, if you log in to any LAA system, we strongly recommend that you change your password immediately.

What You Can Do

The LAA has published a notice on GOV.UK with further details about the breach: Legal Aid Agency data breach - GOV.UK

They also advise visiting the National Cyber Security Centre’s guidance on protecting yourself after a data breach, which can be found here: NCSC Data Breach Guidance

We recommend the following steps:

  • Be vigilant for suspicious emails, texts, or phone calls
  • Do not share personal information unless you are certain of the recipient’s identity
  • Monitor your financial accounts for unusual activity

When the Legal Aid Agency provide further information or guidance you can be assured that we will update this notice. In the meantime, if you have any particular concerns may we suggest that you contact the LAA direct for further guidance.