Back to Legal Aid Agency Data Breach

In 2025, the Legal Aid Agency (LAA), part of the Ministry of Justice, suffered a major cyber-attack. Sensitive personal data from millions of legal aid applicants, dating back to 2007, was accessed and stolen. 

We believe this breach should not go unchallenged. If you were affected, we are here to help you understand your rights and seek compensation on a no win, no fee basis. You can instruct us today for free by simply filling in the client questionnaire below.

Complete your client questionnaire

What happened?

In April 2025, the LAA was the target of a major cyber-attack. This breach exposed sensitive personal data from millions of legal aid applicants, with records dating back as far as 2007. The compromised information may include names, addresses, dates of birth, National Insurance numbers, financial details, and in some cases, information about spouses or partners.

The breach affected applicants across all areas of law, including family, immigration, housing, and criminal defence. Many of those impacted are vulnerable individuals, such as survivors of domestic abuse and asylum seekers, whose data was stored in the LAA’s systems.

Due to years of underfunding and outdated technology infrastructure, the Legal Aid Agency was particularly vulnerable to a cyberattack. Had proper precautions been taken to keep their systems secure, the private and sensitive data of millions of applicants could have been properly managed and protected.

Read the official government statement 

Who is affected by the LAA data breach?

You may be affected if you:

  • Applied for legal aid with any law firm between 2007 and 2025
  • Were involved in a legal matter supported by legal aid (e.g. family, immigration, housing, community care, inquests)
  • Had your personal or financial information stored in the LAA’s systems

What are your rights?

  • Legal representation in our Group Litigation Order that we plan to take to the High Court.
  • Compensation if we win and the High Court decides there has been distress caused to you by the loss of control of your personal data.
  • Ongoing support in understanding how your data may have been used or exposed

No Cost to Register

We are offering representation on a No Win, No Fee basis.

This means:

  • No upfront costs
  • No legal fees unless your claim is successful
  • No obligation to take part in legal action after registering

You can register your interest without committing to anything. We’ll assess your case and keep you informed of the next steps.

How to take action 

We are currently gathering expressions of interest from individuals who wish to be represented in this matter.

The first step to joining our Group Litigation Order is to make an enquiry by filling out our client questionnaire form. This form is completely secure and only the information you share will go direct to the legal team working on this case. They will then be in touch. 

Complete your client questionnaire

Read our FAQs for more information about the breach, your rights, and what happens next.

 

Need help or have questions? 

Should you have any difficulty completing the questionnaire, please contact our team on 01518085059 or email us direct at LAAdatabreach@broudiejacksoncanter.co.uk, and they will support you through the next steps.

Important: We will never ask for bank details, passwords, or one-time passcodes by text or email. If in doubt, call our main number on 0151 808 5059 or type our web address directly into your browser to verify any message.