Legal Aid Breach Reaches 1978
The Legal Aid Agency’s 14 October update adds about 250,000 stolen pre-2007 records, the earliest from 1978, to the April 2025 incident.
Most date from the 1990s or 2000s. A small probation subset covers offenders managed in 2010-2017, over 99 per cent in 2016-2017; it excludes crime victims.
Records, not people
The ministerial statement describes fragmented material, never a complete legal aid case. Dates and listed fields do not establish individual exposure.
Two debt/payment rows extend to December 2025, beyond the 16 May 2025 boundary. This remains unexplained, not proof of later access.
Fields include identity, financial, criminal and family information. On 14 October, the agency reported no indication of publication or sharing. The earlier notice records an injunction, not proof of recovery.
Turn an enquiry into an answer
For an unexpected approach, NCSC guidance recommends contacting the organisation independently, not through incoming links or numbers.
BlackTree proposes a response record for practitioners handling the resulting enquiries. Its purpose is to stop a conversation being marked complete merely because somebody answered the telephone. This is a suggested administrative method, not evidence of a particular scam or a requirement imposed by the agency.
The first entry should be the person’s question in their own words, not a generic breach label. Assign a named staff owner and a response date. Record which answer can be given immediately, which needs the agency’s clarification and who will obtain it. Where an answer remains unavailable, the open question should remain visible when responsibility passes to another colleague.
Keep the explanation separate from any proposed transaction. A request to discuss an old matter should not silently become consent to send documents or change a payment destination. If both are involved, create two decisions with their own responsible people. This makes it possible to finish the information enquiry while leaving a transaction on hold.
That approach gives the client something more useful than a repeated warning: a specific question, an accountable owner and a next response point. It also gives the practitioner a clear distinction between an answered enquiry and an unfinished action.
