UK Legal Aid Agency confirms stolen data dates back to 1978
The UK's Legal Aid Agency said further analysis of an April 2025 breach found that roughly 250,000 stolen records predate 2007, with the earliest verified record from 1978. Most stolen data covers applications, claims and payments from January 2007 to May 2025, but the agency confirmed a smaller, older trove was also taken. The agency had previously disclosed theft of applicant and provider data including contact details, national ID numbers, criminal history, financial information and portal credentials.
GoKawiil's interpretation of the reporting above, not reported fact.
The expanded timeline suggests the breach's scope is larger than initially reported, potentially affecting people who interacted with the justice system decades ago and may no longer expect their data to be at risk. Because legal aid records often include sensitive details like criminal history and financial status, exposure could carry lasting personal and security consequences for affected individuals. The incident also raises questions, not addressed in the agency's statement, about how long government bodies retain decades-old sensitive records.
- Stolen records from the LAA breach date back to 1978, far earlier than first disclosed.
- About 250,000 records predate 2007, though most stolen data covers 2007–2025.
- Compromised data includes applicants' personal, financial and criminal history details plus provider credentials.
Identity theft protection service - LifeLock — With records dating back to 1978 stolen in this breach, affected individuals face long-term exposure to identity theft and fraud. An identity monitoring service can alert you to suspicious use of your personal information, like national ID numbers and financial details, which is especially valuable after large-scale government data breaches like this one.
See Identity theft protection service - LifeLock on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-15
Published there as: “UK Legal Aid Agency: Hackers stole records dating back to 1978”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.