[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhi8jTmg0qCAcn7SbX_lAr6S5gMghX6m7gBBRAKnou-Q":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"abfdd65a-0174-496e-837b-24baea8d740b","UK Legal Aid Agency: Hackers stole records dating back to 1978","uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978-cfef32","The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]","The UK's Legal Aid Agency (LAA) has confirmed that a data breach in April 2025 resulted in the theft of sensitive records, some dating back to 1978. The attackers exfiltrated applicant and provider data, including personal identification details, criminal history, financial information, and LAA Online Portal credentials. The agency is investing over £200 million in modernizing its digital systems and strengthening cybersecurity.","UK Legal Aid Agency confirms hackers stole records dating back to 1978 in April 2025 breach.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fuk-legal-aid-agency-hackers-stole-records-dating-back-to-1978\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F09\u002F02\u002Fjust-uk.jpg","2026-10-15T08:06:47+00:00","2026-10-15T10:00:09.894516+00:00",7,[17,20,23],{"name":18,"type":19},"Ministry of Justice","vendor",{"name":21,"type":22},"DragonForce","threat_actor",{"name":24,"type":25},"LAA Online Portal","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"23e81061-ab06-449f-8807-cbe4bc305045","UK Data Protection","uk-data-protection",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24],{"controls":52,"vendors":137},[53,79,108],{"slug":54,"name":55,"problem":56,"products":57},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":75,"product_name":76,"url":77,"description":78},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"slug":80,"name":81,"problem":82,"products":83},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"slug":109,"name":110,"problem":111,"products":112},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":157},"uk-legal-aid-agency-breach-exposes-decades-of-sensitive-records","UK Legal Aid Agency Breach Exposes Decades of Sensitive Records","The Legal Aid Agency suffered a significant data breach in April 2025 that exposed highly sensitive personal, financial, and criminal records spanning nearly 50 years, indicating systemic failures in data lifecycle management and cybersecurity posture. The theft of LAA Online Portal credentials alongside personal data suggests inadequate access controls and insufficient protection of authentication systems. Retaining unencrypted or poorly secured records dating back to 1978 raises serious questions about data minimisation practices and whether legacy systems were adequately protected. This breach matters because the combination of criminal history, financial data, and identity information creates severe risks of fraud, extortion, and harm to vulnerable individuals who relied on legal aid services. The £200 million modernisation investment, while necessary, highlights how long-deferred digital transformation in public sector organisations can leave citizens exposed.",[143,144,145,146,147,148,149,150,151,152,153,154,155,156],"NIST SP 800-53: AC-2 (Account Management)","NIST SP 800-53: SI-7 (Software, Firmware, and Information Integrity)","NIST SP 800-53: MP-6 (Media Sanitization)","CIS Control 3: Data Protection","CIS Control 5: Account Management","CIS Control 12: Network Infrastructure Management","CIS Control 17: Incident Response Management","GDPR Article 5(1)(e): Storage Limitation","GDPR Article 5(1)(f): Integrity and Confidentiality","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","GDPR Article 33: Notification of a Personal Data Breach","UK Data Protection Act 2018: Schedule 1 Conditions for Sensitive Data","NCSC Cyber Essentials: Access Control and Patch Management",{}]