UK Legal Aid Agency: Hackers stole records dating back to 1978
Attackers exfiltrated nearly five decades of personal records from the UK Legal Aid Agency, spotlighting the compounding breach impact when organisations retain data far beyond defensible retention periods.
Summary written by editorial AI · Source link below
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]
Editorial Analysis
Framed for the Compliance & GRC desk
The breach of records dating back to 1978 illustrates the regulatory and liability risks of retaining personal data far beyond any defensible retention period, relevant under GDPR's data-minimisation principle.
Review and tighten data-retention policies, ensuring legacy datasets are either properly justified, pseudonymised, or securely deleted.
A UK government breach exposing records back to 1978 illustrates how unchecked data retention multiplies breach liability.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Security Desk
- Microsoft Teams to get AI-powered, context-aware phishing detection3d
- Microsoft: Windows Server 2016 reaches end of support in January3d
- Capcom confirms data breach affecting 11.7 million accounts4d
- Dutch National Cyber Security Center is Offline because it uses PHP5d
- Zeabur shutting down after second security breach in two months6d