Legal Aid Agency: Hacking

(asked on 15th July 2025) - View Source

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, when she plans for the Legal Aid Agency’s case management system to be fully operational, following the recent data breach.


Answered by
Sarah Sackman Portrait
Sarah Sackman
Minister of State (Ministry of Justice)
This question was answered on 21st July 2025

This has been an unprecedented event and every effort is being made to restore services following the criminal attack on our systems. The Legal Aid Agency’s (LAA) digital services have been taken offline to negate the threat and prevent further exposure of legal aid providers and users. We have been able to return some systems to internal use, enabling an improved ability to support criminal legal aid applications and payments.

We cannot confirm a specific timescale for full service restoration. In the interim, the LAA will continue to provide updates as soon as they are available and will work closely with representative bodies to ensure any extended or refined contingency measures support providers and their clients to the maximum extent. All updates, including contingency arrangements, are published on the LAA’s dedicated cyber security incident webpage Legal Aid Agency cyber security incident - GOV.UK.

Contingency measures have been implemented to ensure that access to legal aid remains available and that providers are receiving payments. This included the implementation of emergency legislation on 27 June. The new legislation provides for increased delegation of powers to providers and removes civil client contributions. The average payment scheme already operating in civil legal aid will continue.

The LAA retains all data impacted by this incident. There is no evidence of data being permanently lost or destroyed. However, while systems are offline some data is not accessible. Access will be restored as part of service restoration.

The recent data breach is the result of serious criminal activity, but it was enabled by the fragility of the LAA’s IT systems as a result of the long years of underinvestment under the last Conservative Government. By contrast, since taking power this Government has prioritised work to reverse the damage of over a decade of under-investment. That includes the allocation of over £20 million in extra funding this year to stabilise and transform the Legal Aid Agency digital services. This investment will make the system more robust and resilient in the face of similar cyber-attacks in future.

Reticulating Splines