Personal data taken in UK legal aid cyberattack

A “significant” amount of personal data, including criminal records, of applicants who had applied for legal aid since 2010 was accessed and stolen in a cyberattack, Britain's Legal Aid Agency said on Monday.

It said it became aware of the attack on April 23 and had worked with the National Crime Agency since. On Friday it discovered the attack had been more extensive than originally understood and the attackers had accessed information relating to legal aid applicants, forcing it to shut down its online services.

The agency said the group may have accessed applicants' personal information including addresses, dates of birth, national ID numbers and financial data such as contributions amounts, debts and payments.

“Since the discovery of the attack, my team has been working around the clock with the National Cyber Security Centre to bolster the security of our systems so we can safely continue the vital work of the agency,” said Jane Harbottle, CEO of the Legal Aid Agency.

“However, it has become clear that to safeguard the service and its users we needed to take radical action. That is why we've taken the decision to take the online service down.”

Harbottle added the agency, which is part of the ministry of justice, had contingency plans in place and those in need of legal support could continue to access help.

British retailers Marks and Spencer and Co-op were the target of cyberattacks in April, with hackers impersonating employees while contacting the retailers' IT help desks, according to technology specialist site BleepingComputer.

M&S, which had suspended online orders, said earlier this month  personal customer information was taken in the ransomware attack, where criminals infiltrate companies' computer systems, encrypt them and demand payment before allowing them to resume control.

Reuters