Skip to main content

Written question asked by Andy Slaughter (Labour) on Tuesday, 15 July 2025, in the House of Commons. It was due for an answer on Monday, 21 July 2025 (named day). It was answered by Sarah Sackman (Labour) on Monday, 21 July 2025 on behalf of the Ministry of Justice.


Legal Aid Agency: Hacking

Question

To ask the Secretary of State for Justice, whether her Department plans to rebuild the existing case management system or develop a new system, following the Legal Aid Agency data breach.

Answer

This has been an unprecedented event and every effort is being made to restore services following the criminal attack on our systems. The Legal Aid Agency’s (LAA) digital services have been taken offline to negate the threat and prevent further exposure of legal aid providers and users. We have been able to return some systems to internal use, enabling an improved ability to support criminal legal aid applications and payments.

We cannot confirm a specific timescale for full service restoration. In the interim, the LAA will continue to provide updates as soon as they are available and will work closely with representative bodies to ensure any extended or refined contingency measures support providers and their clients to the maximum extent. All updates, including contingency arrangements, are published on the LAA’s dedicated cyber security incident webpage Legal Aid Agency cyber security incident - GOV.UK.

Contingency measures have been implemented to ensure that access to legal aid remains available and that providers are receiving payments. This included the implementation of emergency legislation on 27 June. The new legislation provides for increased delegation of powers to providers and removes civil client contributions. The average payment scheme already operating in civil legal aid will continue.

The LAA retains all data impacted by this incident. There is no evidence of data being permanently lost or destroyed. However, while systems are offline some data is not accessible. Access will be restored as part of service restoration.

The recent data breach is the result of serious criminal activity, but it was enabled by the fragility of the LAA’s IT systems as a result of the long years of underinvestment under the last Conservative Government. By contrast, since taking power this Government has prioritised work to reverse the damage of over a decade of under-investment. That includes the allocation of over £20 million in extra funding this year to stabilise and transform the Legal Aid Agency digital services. This investment will make the system more robust and resilient in the face of similar cyber-attacks in future.


Secondary information

Type
Written question
Reference
67849
Session
2024-26
Grouped for answer
Yes
Subjects
Hacking Legal Aid Agency
Link
View this Written question on www.parliament.uk