UK Legal Aid Agency says stolen records extend back to 1978

The UK's Legal Aid Agency says analysis of data stolen in its April 2025 cyberattack has identified approximately 250,000 records predating 2007, with the earliest verified record dating from 1978. It previously identified stolen applicant and recipient data from 2010 onward. Most of the newly identified older records come from the 1990s and 2000s. The agency cautioned that their presence does not mean everyone who sought legal aid or interacted with the justice system before 2007 was affected. The Ministry of Justice says it is investing more than £200 million in modernising legal aid digital services and strengthening resilience and cybersecurity. It says there is currently no evidence that the exfiltrated personal data has been published.