Legal Aid Agency: Cyber-security Incident

Iqbal Mohamed Excerpts

Monday 19th May 2025 Commons Chamber

[Sarah Sackman]

As I said, those responsible are the baddies here, but let me be clear: I was absolutely shocked when I came into the Department to find the state of the Legal Aid Agency’s legacy IT systems. They were fragile, vulnerable, at risk and, frankly, not fit for purpose. That is not my view; that is the view of the Law Society and lots of users. They have to use an arcane system that is not only slow but, as we have now found, is so fragile that it has exposed many of its users to an unconscionable risk. That is not good enough. It is not talking down the system; it is the state of the system. That vulnerability has been exposed by these malign actors. The fact is that the previous Government knew about it and failed to fix it. We will not make the same mistake.

[Iqbal Mohamed (Dewsbury and Batley) (Ind)]

I thank the Minister for her statement. She is absolutely right. I join the Opposition in condemning the criminals who perpetrated this attack. She has already explained what constituents who may be impacted should do, and I will not ask her to repeat that, but can she assure this House that the learnings from this cyber-attack are already being applied across Government and the public sector? If extra steps are required to access legal aid or process payments by legal aid providers, will the providers be compensated accordingly?

[Sarah Sackman]

Once we have resolved this investigation, once we can be assured that the hackers are no longer in the system and that people’s data is safe and once we can be assured that our legal aid platform is operating properly and is handling people’s data in a safe way, there will need to be a stocktake and an effort to learn lessons, not least as we embark—we are already in the process of doing this—on stabilising and transforming this system so that it is fit for the future. No doubt, there will be lessons from this particular attack for other public and Government bodies. The question of compensation must wait for another day. My priority is removing the hackers from the system, making sure that they feel the full force of the law and ensuring that, in the meantime, no person who needs legal aid cannot get it and the system continues to operate.