Legal Aid Agency Cyberattack Spurs Reform Calls

The UK's Legal Aid Agency, responsible for providing legal aid in England and Wales, experienced a significant cyberattack compromising sensitive personal data of applicants dating back to 2010. The breach was first detected on April 23, with its full extent realized by May 16, and exposed information such as addresses, birth dates, national identification numbers, criminal histories, employment status, and financial records. Hackers claim to have accessed 2.1 million data points, though this remains unverified by authorities. The LAA has taken its online services offline, while the Ministry of Justice has urged vigilance among affected individuals against scams and identity theft. The incident has led to criticism of outdated IT systems and prompted calls for immediate cybersecurity reforms in public sector agencies. Investigations, supported by the National Crime Agency and National Cyber Security Centre, are ongoing as the Agency works to restore services and minimize harm.