[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcrYv6l00PFdRVUVDIaBJFwgQYeBYb9t8uOPGb-6E6Sc":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"3538b096-26c0-4cdd-bf19-f091bc6d65b1","UK Legal Aid Agency Hack Scope Widens After Forensic Review","uk-legal-aid-agency-hack-scope-widens-after-forensic-review-0721f8","Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.","The UK's Legal Aid Agency (LAA) has revealed that a data breach in April 2025 compromised records stretching back to 1978, significantly widening the scope of the incident. Initially reported in May 2024, the breach now includes approximately 250,000 records predating 2007, with the earliest verified record from 1978. The compromised data includes sensitive personal information of applicants, legal aid practitioners, judges, and probation service users.","UK Legal Aid Agency hack impacts records dating back to 1978.","https:\u002F\u002Fwww.securityweek.com\u002Fuk-legal-aid-agency-hack-scope-widens-after-forensic-review\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F06\u002FUK_Cyberwarfare.jpg","2026-10-15T14:22:34+00:00","2026-10-15T16:00:14.114869+00:00",7,[17,20,23],{"name":18,"type":19},"Client and Cost Management System (CCMS)","product",{"name":21,"type":22},"Legal Aid Agency (LAA)","vendor",{"name":24,"type":22},"Ministry of Justice","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":25,"icon":27,"name":28,"slug":29},null,"Breaches","breaches",[31,36,38,43],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"23e81061-ab06-449f-8807-cbe4bc305045","UK Data Protection","uk-data-protection",{"category":37},{"id":25,"icon":27,"name":28,"slug":29},{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,18],{"controls":51,"vendors":139},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"slug":82,"name":83,"problem":84,"products":85},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"slug":111,"name":112,"problem":113,"products":114},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":157},"uk-legal-aid-agency-breach-exposes-47-years-of-sensitive-records","UK Legal Aid Agency Breach Exposes 47 Years of Sensitive Records","The Legal Aid Agency breach demonstrates the catastrophic risk of retaining decades of sensitive personal data without robust access controls or data minimisation practices. The scope expanding from an initial disclosure to records dating back to 1978 suggests inadequate data lifecycle management and poor visibility into what data was actually held and accessible. Forensic review revealed far more exposure than initially understood, highlighting a failure in both incident response completeness and ongoing monitoring of sensitive data repositories. This matters deeply because historical records of legal aid applicants, judges, and probation users carry significant risks of identity fraud, coercion, and reputational harm when exposed. Organisations holding legacy data must treat it with the same rigour as current records.",[145,146,147,148,149,150,151,152,153,154,155,156],"GDPR Article 5(1)(e) – Storage Limitation","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 33 – Notification of a Personal Data Breach","NIST SP 800-53 IR-4 – Incident Handling","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 AU-2 – Audit Events","NIST SP 800-53 SI-12 – Information Management and Retention","CIS Control 3 – Data Protection","CIS Control 8 – Audit Log Management","CIS Control 13 – Network Monitoring and Defense","ISO\u002FIEC 27001:2022 A.8.10 – Information Deletion","ITIL Service Transition – Incident and Problem Management",{}]