Legal Aid Agency: Cyber-security Incident

Andrew Murrison Excerpts

Monday 19th May 2025 Commons Chamber

[Sarah Sackman]

I will not disclose the name of the perpetrators of this malign attack. I do not think it would be responsible for me to do so while the investigation is live and while they are being pursued, not least through legal avenues. I am not able to share that information at the moment, but when I can share it, I will of course update the House.

[Dr Andrew Murrison (South West Wiltshire) (Con)]

In her zeal to have a pop at the previous Government, the Minister implied that this country was peculiarly vulnerable to cyber-attack. There will be people listening to her out there who may be encouraged by that, so will she correct the record and reflect upon the International Telecommunication Union’s global cyber-security index, which found Britain to be right at the very top of the league table for cyber-security, along with countries known to be experts, such as Estonia and Germany? Does she agree that while we must not be complacent, it is important to tell the whole truth?

[Sarah Sackman]

As I said, those responsible are the baddies here, but let me be clear: I was absolutely shocked when I came into the Department to find the state of the Legal Aid Agency’s legacy IT systems. They were fragile, vulnerable, at risk and, frankly, not fit for purpose. That is not my view; that is the view of the Law Society and lots of users. They have to use an arcane system that is not only slow but, as we have now found, is so fragile that it has exposed many of its users to an unconscionable risk. That is not good enough. It is not talking down the system; it is the state of the system. That vulnerability has been exposed by these malign actors. The fact is that the previous Government knew about it and failed to fix it. We will not make the same mistake.