'Significant amount' of private data stolen in UK Legal Aid hack

https://www.bbc.co.uk/news/articles/cgr5g4pv2l0o

by neversaydie • 1 year ago

51 40 1 year ago

bbc.co.uk

egorfine6• 1 year ago

she understood the news "will be shocking and upsetting for people".

And that's about it. No repercussions will take place.

tgv• 1 year ago

Your comment is against the site rules on first sight, but it’s at the core of the problem: strong regulation, surveillance and punishment are sorely lacking.

celticninja4• 1 year ago

Who do you want to punish exactly?

buserror• 1 year ago

It is entirely possible the IT was outsourced to the highest bidder, probably with limited liability clauses etc etc. See Post Office for reference, they are still reaping contract money out of the government, years after having been proven as responsible for ruining people's lives for decades, and coverups.

taffynay• 1 year ago

Governments outsource to the lowest bidder. Whoever can do the job for the cheapest.

moreati2• 1 year ago

The Legal Aid breach is, I’m told, a ransomware/extortion group (not mentioned in the notice). If it looks like the UK gov are going to pay, or pay via third party, this one will become a megathread. https://www.gov.uk/government/news/legal-aid-agency-data-bre... -- https://cyberplace.social/@GossiTheDog/114533584686916433

Note Gossi's "If". There's no indication so far wrt possible payment.

celticninja4• 1 year ago

They are not going to pay anything I guarantee it. There is no randomware. They shut their services down before the attacker could deploy ransomware although the attacker likely accessed data.

alias_neo• 1 year ago

likely accessed data

There's nothing "likely" about it.

On Friday 16 May we discovered the attack was more extensive than originally understood and that the group behind it had accessed a large amount of information relating to legal aid applicants.
We believe the group has accessed and downloaded a significant amount of personal data from those who applied for legal aid through our digital service since 2010.
This data may have included contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history, employment status and financial data such as contribution amounts, debts and payments.

source: https://www.gov.uk/government/news/legal-aid-agency-data-bre...

Urahandystar• 1 year ago

The UK government does not pay ransomware and advises private businesses not to also. https://www.ncsc.gov.uk/section/respond-recover/ml-ransomwar...

moreati2• 1 year ago

I wasn't trying to suggest they wil. I emphasised Gossi's If because I missed it on my first read. I didn't want others making the same mistake.

blitzar2• 1 year ago

The official positions of Governments is counter to the actual behaviour in many many circumstances.

blitzar2• 1 year ago

Looks like they were doing everything on AWS for about 6 years.

Ransomed by Jeff Bezos.

echelon_musk• 1 year ago

Ransom refers to when a person or thing is released, not when it's taken.

Do you mean stolen by Jeff Bezos, or to imply that AWS has another copy of the data?

kmlx• 1 year ago

just in case people are not aware what "legal aid" or what "Legal Aid Agency" are:

Legal aid is the provision of assistance to people who are unable to afford legal representation and access to the court system. Legal aid is regarded as central in providing access to justice by ensuring equality before the law, the right to counsel and the right to a fair trial.
The Legal Aid Agency is an executive agency of the Ministry of Justice (MoJ) in the United Kingdom. It provides both civil and criminal legal aid and advice in England and Wales.

from https://en.wikipedia.org/wiki/Legal_Aid_Agency

'Significant amount' of private data stolen in UK Legal Aid hack

Related Stories