Legal Aid Agency says hackers took records dating to 1978, including probation data
The Legal Aid Agency said October 14, 2026 that data stolen in its 2025 cyber attack includes about 250,000 records predating 2007, the earliest from 1978, plus some probation data. Exfiltrated provider data may include office locations, payment details and bank account numbers and sort codes. Courts minister Sarah Sackman said there is no indication the stolen data has been published or shared.
Report (GOV.UK) → · Law Gazette
Key points
- Most exfiltrated records relate to applications, claims or payments between January 2007 and May 16, 2025.GOV.UK
- Provider data may also include online portal user names and email addresses and the names of fee earners on cases.GOV.UK
- Surnames, initials and postcodes of suspects who received police station advice may have been taken.Law Gazette
- Probation data covers a relatively small number of offenders supervised between 2010 and 2017; none relates to victims of crime.GOV.UK
- The systems were breached in December 2024, but the agency only became aware of the attack in April 2025.Law Gazette
- Sackman said much of the stolen information was unstructured, fragmented and incomplete.Law Gazette