UK (Parliament Politics Magazine) – Millions of Legal Aid records hacked, exposing sensitive data and sparking concern over outdated systems and years of government neglect.
As reported by The Independent, the Legal Aid Agency is under fire after a cyberattack exploited its outdated systems, exposing sensitive personal information and criminal histories.
The Ministry of Justice confirmed that a major cyberattack in April led to a breach and download of applicant personal data dating back to 2010.
Hackers claim to have stolen 2.1 million data points, but the MoJ has not yet verified the attackers’ assertions.
What did Richard Atkinson say about the Legal Aid Agency’s response to the cyber attack?
Richard Atkinson, president of the Law Society of England and Wales, an organisation representing solicitors, said,
“It is extremely concerning that members of the public have had their personal data compromised in this cyber security incident and the LAA must get a grip on the situation immediately.”
He stated,
“The incident once again demonstrates the need for sustained investment to bring the LAA’s antiquated IT system up to date and ensure the public has continued trust in the justice system.”
Mr Atkinson said,
“The fragility of the IT system has prevented vital reforms, including updates to the means test that could help millions more access legal aid, and interim payments for firms whose cash flow is being decimated by the backlogs in the courts, through no fault of their own,”
adding,
“If it is now also proving vulnerable to cyber attack, further delay is untenable. Legal aid firms are small businesses providing an important public service and are operating on the margins of financial viability. Given that vulnerability, these financial security concerns are the last thing they need.”
MoJ source blames previous government for LAA data breach
According to a MoJ source, the breach resulted from prolonged neglect and poor management under the previous government. They said vulnerabilities in the Legal Aid Agency’s system had been known for a long time.
The source said,
“This data breach was made possible by the long years of neglect and mismanagement of the justice system under the last government. They knew about the vulnerabilities of the LAA digital systems, but did not act.”
What did Jane Harbottle say about the recent cyberattack?
The Legal Aid Agency’s chief executive, Jane Harbottle, apologized for the recent data breach.
She said,
“I understand this news will be shocking and upsetting for people and I am extremely sorry this has happened. Since the discovery of the attack, my team has been working around the clock with the National Cyber Security Centre to bolster the security of our systems so we can safely continue the vital work of the agency.”
Ms Harbottle stated,
“However, it has become clear that, to safeguard the service and its users, we needed to take radical action. That is why we’ve decided to take the online service down.”
She said the agency has plans to guarantee ongoing access to legal assistance for those in need.
How did Jake Moore react to the Legal Aid Agency cyber attack?
Global cybersecurity expert Jake Moore from ESET responded to the incident. He stressed the urgent need for public agencies to invest in cyber defences and disclose breaches as soon as possible.
He said,
“When criminal records and other sensitive personal data are exposed, it is not just a matter of IT failure, it’s a breach of trust, privacy, and even safety in this case.”
Mr Moore stated,
“Many of the individuals affected may already be in vulnerable situations and could now face the added stress of not knowing where their data will end up or how it might be used,”
adding,
“Delays in notifying victims or vague reassurances can often worsen the damage whether it’s a Government agency or private company.”