Legal Aid data breach.
Could compensation be available?
Information about the Legal Aid Agency data breach is available in one place. Explore potential eligibility and find out what an enquiry involves. Compensation is not guaranteed.
Secure & Encrypted
UK-based data storage
Cost to join
£0
Thousands
of people potentially affected
£0
upfront cost to join the claim
5 min
to register your details securely
100%
confidential and strictly regulated
A serious breach of trust
and personal privacy
On 23 April 2025, the Legal Aid Agency identified a cyber-attack on its online services. On 16 May, it established that criminals had accessed and taken a significant amount of personal data, including information relating to legal aid applicants and providers.
The Agency’s 14 October 2026 update says the vast majority of affected legal aid data relates to applications, claims or payments from January 2007 to 16 May 2025, or cases live during that period. Some records are older, with the earliest verified record dating from 1978. Not everyone who used legal aid during these years was necessarily affected.
Exposed data may include:
- Names, addresses and dates of birth
- National Insurance numbers
- Financial assessments and payments
- Case details and some family information
Your circumstances matter
The type and amount of information taken varies by individual. Not every record contained all the details listed here.
Why this could matter to you
You shared information to get legal help, often at a difficult time. The concern is not just which details were taken, but how their exposure could affect your privacy, finances and peace of mind.
Choose a topic to read more, at your own pace.
A caller who knows your name, address or legal case may seem genuine. Stolen details could be used to impersonate a solicitor, a government service or your bank and persuade you to share more information or make a payment.
Potential risks, not confirmed outcomes. In its 14 October 2026 update, the Legal Aid Agency said it had no indication that the stolen data had been published or shared. The information affected varies between individuals; being in a listed group does not establish that your data was taken.
You do not have to lose money for the impact to matter
The ICO explains that compensation can cover financial loss or non-financial damage, such as distress, caused by an organisation breaking data protection law. A claim can therefore be worth exploring even if your bank account is unaffected.
Compensation is not automatic. A breach alone, or a possible future risk, does not establish entitlement. Your circumstances, the information involved, the harm suffered and its connection to the breach all need assessment.
The ICO cannot award compensation. An organisation may agree a settlement; otherwise a court decides. Before instructing anyone, check their identity, regulatory status, fees and any potential costs if the claim fails, and seek independent legal advice.
Check my eligibilityRegistration does not guarantee eligibility or compensation.
Read the sources for yourself
- Legal Aid Agency: official incident update, 14 October 2026 (opens in a new tab)
- ICO: taking your case to court and claiming compensation (opens in a new tab)
Sources checked on 26 October 2026. This website is not the Legal Aid Agency, the Ministry of Justice or the ICO; these source links do not imply endorsement. This is general information, not individual legal advice.
Four simple steps to register your claim
We've made the registration process as frictionless as possible. You can secure your place in the claim entirely online in just a few minutes.
Check your eligibility
Answer a few quick questions about your legal aid history so we can confirm you may be affected.
Enter your details
Provide your personal details and optionally upload proof such as a letter or email from the legal aid body.
Sign securely
Sign digitally to authorise us to pursue your claim. It takes under five minutes.
We do the rest
Our legal team verifies your claim, builds the case and keeps you updated every step of the way.
Could you be eligible for compensation?
You may qualify to join the claim if any of the following apply to you. Do not worry if you are unsure or lack documentation: our legal team can verify every claim on your behalf.
You applied for or received legal aid in England or Wales
You received an email or letter notifying you about the data breach
You used legal aid for family, housing, immigration, criminal or other matters
You have not already signed up with another claims management company
Frequently asked questions
Find answers to common queries about the breach and the claims process.
Do not leave your compensation to chance.
Registering takes just a few minutes, costs absolutely nothing upfront, and operates on a no-win, no-fee basis. Secure your place in the group claim today.
Register My Claim Now256-bit secure encryption