Legal Aid Agency: Cyber-security Incident

Andy Slaughter Excerpts

Monday 19th May 2025 Commons Chamber

[Madam Deputy Speaker (Judith Cummins)]

I call the Chair of the Justice Committee.

[Andy Slaughter (Hammersmith and Chiswick) (Lab)]

The loss of very sensitive data relating to so many vulnerable people over such a long time makes this one of the most serious data breaches of recent years. It is also a wake-up call, alerting us to the poor state of the Legal Aid Agency IT systems, and perhaps Government IT systems more generally. I appreciate that the Minister has inherited this debacle, but it is on her desk now. Will she confirm the numbers affected, whether the leaks have been stemmed, and what steps are being taken to recover the data from the thieves who have taken it? I have more questions that there is not time to deal with here. She said that she will provide a written statement, but will she also brief the Select Committee and the opposition parties, if necessary in confidence, on the steps being taken to rectify the situation?

[Sarah Sackman]

I thank my hon. Friend for that pertinent question. He will appreciate that it would be inappropriate for me to comment in any great detail while the investigation is ongoing. As he and the rest of the House can imagine, if we are talking about those who have applied for or been in receipt of legal aid since 2010 and all the legal providers in this country that have had legal aid contracts with the Government, one gets a sense of the scale of the exposure. It is a very serious breach indeed.

The malign criminals who are responsible for the hack have given a figure for the amounts of data that they have, which has been trailed in some of the newspapers. Those who have read the papers will know that it is in the region of 2 million items of data, so one can see that the scale of the problem is very serious indeed. I should say that that figure cannot be verified, and I will not comment in further detail.

With respect to my hon. Friend’s request that the JSC and Opposition parties are kept up to date as the investigation develops and as we take steps to eliminate this risk from our systems, I am very happy to give that update.