Commons Sense

House of Commons · General Debate

Legal Aid Agency Cyber-Security Incident: Data Update

14 October 2026 · 1 other contributor

Opened by Sarah Sackman Lab Constituency

Summarised by AI from the official record, so it can contain mistakes.

At a glance

Sarah Sackman raised concerns about legal aid agency cyber-security incident: data update in the House of Commons. Other MPs contributed to the debate.

Key points

  • Legal Aid Agency suffered a criminal cyber-attack in 2025 resulting in the exfiltration of personal data including names, addresses, dates of birth, and financial information.
  • Data affected spans from 1978 to 2025, with the majority from 2007 to 2025.
  • Government allocated 200 million for transformation and recovery efforts.

How the debate unfolded

MPs spoke in turn to share their views and ask questions. Here's what each person said.

Opened the debate

Sarah Sackman Lab Constituency

Sarah Sackman provided an update on the 2025 criminal cyber-attack on the Legal Aid Agency’s digital services. She stated that the attack led to the exfiltration of personal data, including names, addresses, dates of birth, and financial information, dating back to 1978, although the majority dates from 2007 to 2025. The government allocated £200 million for transformation and recovery, and no indication exists that the stolen data has been published or shared.

Other contributors (1)
  • Sarah Sackman detailed the cyber-attack on the Legal Aid Agency’s digital services, noting that the attack affected a small proportion of data dating back to before 2007, with the earliest verified record dating from 1978. She emphasised that the exfiltrated data is unstructured and fragmented, making it difficult for criminals to identify specific individuals. Additionally, she highlighted that the government is working to strengthen security monitoring and technical checks to make LAA services more secure and resilient in the future.

Get updates like this by email
▸ Assessment & feedback
Summary accuracy