Question to the Ministry of Justice:

To ask His Majesty's Government what assessment they have made of the recent cyber-attack on the Legal Aid Agency; what steps they are taking to ensure that legal aid providers are being remunerated for their work despite any disruption; and when the Agency's online digital service will again be operational.

On Wednesday 23 April, the Department became aware of a cyber-attack on the Legal Aid Agency’s (LAA) online digital services.

To ensure the best chance of reaching as many potentially impacted individuals as possible the Ministry of Justice acted quickly. A notice was published a notice at 08:15 on the 19 May on GOV.UK.

This has been an unprecedented event and every effort is being made to restore services following the criminal attack on our systems. The LAA digital services have been taken offline to negate the threat and prevent further exposure of legal aid providers and users. We have been able to return some systems to internal use, enabling an improved ability to support criminal legal aid applications and payments.

We cannot confirm a specific timescale for full service restoration. In the interim, the LAA will continue to provide updates as soon as they are available and will work closely with representative bodies to ensure any extended or refined contingency measures support providers and their clients to the maximum extent. All updates, including contingency arrangements, are published on the LAA’s dedicated cyber security incident webpage: https://www.gov.uk/guidance/legal-aid-agency-cyber-security-incident.

Our priority remains to maintain access to justice and to ensure legal aid providers can continue to be paid in a timely manner. These enhanced measures are designed to support legal aid providers and their clients and to prevent a significant case backlog while contingency measures are in place.

The data breach is the result of serious criminal activity, but it was enabled by the fragility of the LAA’s IT systems as a result of the long years of underinvestment under the last Conservative Government. By contrast, since taking power this Government has prioritised work to reverse the damage of over a decade of under-investment. That includes the allocation of over £20 million in extra funding this year to stabilise and transform the LAA digital services. This investment will make the system more robust and resilient in the face of similar cyber-attacks in future.