The Ministry of Justice has confirmed that the cyber attack on the Legal Aid Agency (LAA) is far more extensive than initially reported, with millions of highly sensitive records potentially exposed.

The attack, first discovered in April 2025, forced the LAA to take its online portal offline in May. The portal, which legal aid providers use to record work and receive government payments, remains down. Investigations have since revealed that hackers accessed personal data of applicants dating back as far as 2007, three years earlier than the government’s first estimate.

The compromised data includes names, addresses, dates of birth, national insurance numbers, employment status, criminal history, debts and payments, and in some cases details of applicants’ partners. Authorities say there is no evidence so far that the information has been published, but an injunction is in place banning any distribution of the stolen files.

Hacker Group Claims Responsibility

A cybercrime gang known as ShinyHunters has claimed responsibility for the breach. The group alleged it obtained more than two million records and issued threats to publish the data unless one of its members was released from custody. The deadline passed without any leaks being verified on the dark web.

The National Crime Agency and National Cyber Security Centre are working with the LAA to investigate. The Information Commissioner has also been notified.

Sector Under Pressure

The fallout has been severe for legal aid practitioners. Without access to the LAA’s systems, solicitors and barristers have struggled to process cases or claim payments. Many firms have been forced to rely on temporary manual processes, which the Law Society has described as unsustainable.

Law Society president Richard Atkinson warned that the disruption is “pushing the sector towards collapse,” saying many firms could be forced to abandon legal aid work altogether. He also criticised the reliance on “antiquated IT systems” that were vulnerable to attack.

Some providers have reported receiving contingency payments as low as £9.50 a week, well below the cost of carrying out legal aid work. The Society is pressing the government for fair compensation to cover months of unpaid administrative labour.

The crisis has also delayed the introduction of planned fee uplifts for legal aid cases, raising concerns about the long-term viability of the service.

Political Scrutiny

The House of Commons Justice Select Committee will examine the government’s response as part of its broader access to justice inquiry. Committee chair Andy Slaughter has submitted a series of parliamentary questions on issues ranging from data retention and means test reforms to billing delays and whether the system is being rebuilt or replaced.

Justice minister Sarah Sackman told MPs the government was “working at pace” to restore digital services but could not confirm when the system would be fully operational.

Replacement System Planned

In response, the LAA has announced it will launch a new secure portal, Sign in to Legal Aid Services (SILAS), in September 2025. The system is currently being piloted with 70 firms and will be rolled out in phases. Providers will be required to re-verify their details before accessing services.

Officials say core functions, including the benefits checker, will be prioritised for restoration. Updates are now being issued weekly rather than daily.

Public Advice

Anyone who applied for legal aid between 2007 and May 2025 is being urged to stay alert for suspicious activity, such as unexpected phone calls, emails or messages. The National Cyber Security Centre has published guidance on how to protect against potential fraud or identity theft. The LAA has said it will contact all individuals whose personal data may have been affected.