securityweek.comarticleUK Legal Aid Agency Hack Scope Widens After Forensic Review
SecurityWeek reports that a forensic review of the April 2025 UK Legal Aid Agency (LAA) breach found compromised records going back to 1978. About 250,000 records predate 2007, and most of the rest cover 2007–2025. Exfiltrated data includes applicant PII such as National Insurance Numbers and CCMS answers, practitioner contracts, payment details and account credentials, and some probation service user data. LAA says it has no evidence the data was published or sold, and attributes the long investigation to unstructured, fragmented data across multiple systems.
TL;DR UK Legal Aid Agency's April 2025 breach was larger than first disclosed: records back to 1978, about 250k pre-2007 records, plus practitioner credentials and probation data.
Organisations named here
- Client and Cost Management System
- Legal Aid Agency
- National Insurance Number
- UK Ministry of Justice
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup