A serious data breach that has occurred within the Legal Aid Agency (LAA) — the government body that handles legal aid applications and payments.
Please note: This incident did not involve or originate from our law firm. Our systems remain secure. However, we believe it is important to inform you, even though we are not required to do so, because your interests and privacy are our top priority.
What happened:
On 23 April 2025, the Legal Aid Agency discovered a cyber-attack on its digital systems. These are the systems used by legal aid providers to log cases and receive payments.
Initially, the breach was thought to affect only legal aid providers. However, on 16 May, it was confirmed that the attack was much more extensive than first believed. The hackers had accessed and downloaded a large amount of personal data belonging to people who applied for legal aid since 2010.
What information may have been accessed:
The data accessed could include:
- Your name, address, and contact details
- Your date of birth
- National ID or reference numbers
- Information about your legal case, such as criminal history or employment status
- Financial details, including legal aid contributions, payments, or debts
What you can do:
We strongly advise you to take the following steps to help protect yourself:
- Be cautious of unexpected phone calls, emails, or messages asking for personal details
- Do not give out information unless you’re sure who you are dealing with
- Change any passwords that may have been used on legal, financial, or government websites
- Monitor your bank accounts and credit reports for any suspicious activity
For further advice on how to protect yourself, we recommend reviewing this official guidance:
Data breach guidance for individuals– ncsc.gov.uk
Why we are telling you:
Although the Legal Aid Agency has not asked legal aid providers to notify clients directly, we believe it is important to proactively inform you in case your personal data has been affected. We are committed to supporting our clients and helping to protect your privacy wherever possible.
If you have any questions or would like to discuss this further, please do not hesitate to get in touch with us.
Cygnet Law


