← Back to House of Commons Debates
Legal Aid Agency Cyber-security Incident 2025-05-19
19 May 2025
Lead MP
Sarah Sackman
Debate Type
General Debate
Tags
No tags
Other Contributors: 12
At a Glance
Sarah Sackman raised concerns about legal aid agency cyber-security incident 2025-05-19 in the House of Commons. A government minister responded. Other MPs also contributed.
How the Debate Unfolded
MPs spoke in turn to share their views and ask questions. Here's what each person said:
Lead Contributor
Opened the debate
The Government has been dealing with a cyber-attack on the Legal Aid Agency's digital systems since April. The attack was extensive and compromised sensitive personal data from legal aid applicants since 2010. Systems were taken offline for investigation and recovery, and an update will be provided as the situation evolves. The Minister emphasises that previous Governments had been warned about the system vulnerabilities but did not act on them.
Kieran Mullan
Con
Bexhill and Battle
The shadow minister criticises the delay in notifying the public and questions the Government's response. He asks about the timeline for system restoration, origin of the attack, risk assessment of other systems, improvements to be achieved with £20 million funding, and commitment to transparency and support for affected individuals.
Sarah Sackman
Con
The Minister explained that when Ministers were first informed about the exposure of the Legal Aid Agency’s digital platforms to a risk, they did not have full information on its extent and nature. At that point, the responsibility to keep the legal aid system running outweighed informing the House. The system has been closed down to prevent further data breaches, and contingency plans are in place for those needing legal support. The Government will invest £20 million to stabilise and transform the service, partly due to prior investments which helped detect the threat. Transparency will be provided through a written update.
Andy Slaughter
Lab
Hammersmith and Chiswick
The shadow Minister highlighted that this data breach is one of the most serious in recent years, affecting numerous vulnerable individuals. He questioned the scale of the affected people, asked for steps to recover stolen data, and requested regular updates from the Government on rectifying the situation.
Eastbourne
The Liberal Democrat spokesperson expressed concern over the breach's impact on trust in the justice system and legal aid users. He asked how the Minister will proactively communicate with affected individuals, consider launching a dedicated advice line, ensure continued access to legal aid services, and conduct a cybersecurity review of all systems used by the Government.
Lauren Edwards
Lab
Rochester and Strood
The MP pointed out that recent Public Accounts Committee findings showed substantial gaps in understanding IT resilience against cyber-attacks. She urged for an urgent assessment of robustness across all Departments, including legacy systems and the supply chain.
David Reed
Con
Exmouth and Exeter East
The MP suggested updating the Computer Misuse Act 1990 to enhance cyber-resilience through strengthened legal protections for cybersecurity researchers. The Minister responded by mentioning the upcoming Cyber-Security and Resilience Bill.
Chris Vince
Lab/Co-op
Harlow
The MP expressed shock at the attack's impact on vulnerable individuals in Harlow and asked how residents can protect themselves if their data has been compromised, as well as how they can access legal aid.
Maldon
Asked about the perpetrators of the cyber-attack, whether they are UK-based or state actors. He also inquired if checks were being made across Government to identify any security breaches that may not yet have been acted on.
Andrew Murrison
Con
South West Wiltshire
Corrected the Minister's statement, pointing out that the UK is at the top of the International Telecommunication Union’s global cyber-security index. He urged the Minister not to talk down the system while acknowledging its vulnerabilities.
Iqbal Mohamed
Ind
Dewsbury and Batley
Inquired about the learnings from this cyber-attack being applied across Government and public sector, and whether extra steps required to access legal aid or process payments by legal aid providers will be compensated.
Alison Griffiths
Con
Bognor Regis and Littlehampton
Asked why it took a newspaper article for the Minister to come to the House, questioning whether there was more information not being disclosed. She highlighted the severe impact of this cyber-attack on millions of pieces of sensitive personal data.
Jim Shannon
DUP
Strangford
Asked if the attack encompasses legal aid details from the entirety of the UK, and whether discussions have taken place with the Justice Minister in Northern Ireland. He expressed concern for those feeling vulnerable such as domestic abuse victims.
Government Response
Government Response
The Minister reiterates that the Government will pursue justice against those responsible. She acknowledges system vulnerabilities but emphasises their focus on eliminating threats and investing in resilience for long-term transformation of platforms. Minister Sarah Sackman addressed concerns regarding the extent of the breach, confirming that approximately 2 million items of data have been stolen but cautioned against verifying this figure until further investigation. She pledged to keep the Justice Select Committee and Opposition parties updated on steps taken to address the situation. The Government is proactively communicating with legal aid providers who will inform their clients, and directly contacting particularly vulnerable individuals. A dedicated advice line was considered but not yet confirmed. The Minister confirmed that all legal aid providers have been informed about the issue and provided guidance on how to proceed. She emphasised the importance of maintaining access to emergency legal aid while ensuring data security, indicating plans for a stocktake to learn lessons from this incident.
Shadow Response
Dr Kieran Mullan
Shadow Response
The shadow minister urges the Government to provide more details about the response measures, timelines, risk assessments, funding improvements, and commitments to transparency and support for those affected.
▸
Assessment & feedback
Summary accuracy
About House of Commons Debates
House of Commons debates take place in the main chamber of the House of Commons. These debates cover a wide range of topics including government policy, legislation, and current affairs. MPs from all parties can participate, question ministers, and hold the government accountable for its decisions.