Legal Aid Data Breach Leaks Millions of Sensitive Records, MoJ’s Poor Cybersecurity Practices Slammed

Wednesday, May 28, 2025
When leaked to the public, that information could irreparably damage individuals who were arrested or interrogated without being charged with any crime. Individuals who also requested a public defender and later changed to private representation were also affected. The data breach put these individuals at risk of cyber extortion and blackmail.
“We may expect a massive but targeted blackmailing campaigns against the victims, as well as their employers or relatives,” said Dr. Ilia Kolochenko, CEO at ImmuniWeb. “For example, if a person has (or had) an unspent conviction and currently works in a sensitive area of economy, such as wealth management or financial audit, his or her employer may wish to pay a ransom to avoid bad publicity for the firm – even if all underlying risks were duly addressed as provided by law, industry standards and applicable internal policies.”
While the ministry has yet to release the actual number of individuals impacted, threat actors claim the data breach exposed over 2 million records. Read Full Article
CyberNews: Meta begins training AI using EU citizens’ data, but the fight’s not over yet
Identity Week: Cyber-attack on the Legal Aid Agency’s online digital services