Legal Aid Agency Data Breach: What You Need to Know

16 October 2026

Recent developments have shed light on the extent of the cyber-attack that targeted the UK's Legal Aid Agency (LAA) in April 2025. Initially, it was believed that the breach affected records from 2007 onwards. However, an update from the LAA on 14 October 2026 has revealed that approximately 250,000 records predating 2007 were also compromised, with some dating back as far as 1978. This means that personal data spanning nearly five decades has been exposed.

The compromised information includes names, addresses, dates of birth, National Insurance numbers, and details related to legal aid applications and cases. Additionally, some probation data from the HM Prison and Probation Service was also accessed. While the LAA has stated that there is no evidence to suggest the stolen data has been published or shared, the sheer volume and sensitivity of the information are cause for concern.

For individuals who have applied for legal aid or interacted with the probation service during this period, it's crucial to remain vigilant. Monitor your financial accounts for any unusual activity and be cautious of unsolicited communications requesting personal information. If you suspect that your data has been misused, report it to the relevant authorities promptly.

At Thompson Family Law, we understand the anxiety such breaches can cause. Protecting your personal information is paramount, and we recommend taking proactive steps to safeguard your data. If you have concerns or need guidance on how to protect yourself in light of this breach, please don't hesitate to reach out to us. We're here to help you navigate these challenges with practical advice and support.