Private data including criminal records stolen in Legal Aid hack

A “significant amount” of private data including criminal records has been hacked from the Legal Aid online system, the Ministry of Justice has said.

The MoJ said it became aware of a cyber-attack on the Legal Aid Agency’s (LAA) online services on April 23 of data dating back to 2010. It later realised the incident was “more extensive than originally understood”.

The agency’s chief executive Jane Harbottle apologised for the breach, saying she understood the news “will be shocking and upsetting for people”.

The group that carried out the attack claimed it accessed 2.1 million pieces of data, according to the PA news agency. The MoJ has not verified that figure, however.

The ministry urged members of the public who have applied for legal aid in this time period to take steps to safeguard themselves.

“This data may have included contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history, employment status and financial data such as contribution amounts, debts and payments,” it said.

It also warned the public to be alert for any suspicious activity, including unknown messages or phone calls, and to update any potentially exposed passwords.

“If you are in doubt about anyone you are communicating with online or over the phone you should verify their identity independently before providing any information to them,” it said.

The ministry said it was working with the National Crime Agency and the National Cyber Security Centre, and has informed the Information Commissioner.

The LAA’s online digital services, which are used by legal aid providers to log their work and get paid by the government, have been taken offline.

The agency is the latest victim in a series of recent cyber-attacks that have caused mass disruption.

Earlier this month, luxury department store Harrods said it had “restricted internet access at our sites” following an attempt to gain access to its systems.

An attack on Marks & Spencer in April caused it to lose out on millions of pounds of sales and left it struggling to get services back to normal.

A similar incident at the Co-op forced it to shut down parts of its IT systems and disrupted deliveries of fresh stock.