The Legal Aid Agency (LAA) data breach refers to a significant cyberattack against the UK’s Legal Aid Agency that became public in 2025. The Legal Aid Agency is an executive agency of the Ministry of Justice and holds sensitive information relating to people who have applied for legal aid.

The breach affected individuals who applied for legal aid through their digital service from 2007 to 16th May 2025, making it one of the more serious public sector data breaches due to the sensitivity of the information involved.

Yes, if your data was part of the breach, you should be contacted directly with regards to the breach, however if you haven’t and you think you were affected we can review your details.

The information reported to have been compromised included:

Full names
Addresses
Dates of birth
National Insurance numbers
Criminal history information (where relevant to legal aid applications)
Financial information, including income and debts
Employment details
Contact details

Each claim is assessed individually, but compensation may be available for the impact a data breach or GDPR violation has had on you. This can include any financial losses caused by misuse of your personal information, such as fraudulent transactions or accounts being opened in your name, as well as distress, anxiety, stress or other emotional effects caused by the breach. You may also be able to claim for a loss of privacy where an organisation has failed to properly protect your personal data or uphold your data protection rights.