The Legal Aid Agency (LAA), an executive agency of the Ministry of Justice of the UK, which oversees the billions in legal funds, warned the law firms of a security incident and said that the attackers could reach financial information.
Around 2,000 providers, including barrister, solicitor firm and non-profit organizations, provide civil and criminal legal aid services in England and Wales under contract with laye. The agency appoints about 1,250 employees and runs the country’s public defender service.
In a letter sent to the law firms, the agency said that it could not confirm whether any data was accessed. Nevertheless, it acknowledged the risk that the payment information of legal aid providers could be compromised, as Sky News first reported,
The agency’s letter reads, “The incident is being investigated according to our data security procedures, and action has been taken to reduce the incident.” “LAA takes the protection of the information we have seriously, and we understand that the potential effect can be on you.”
The UK National Crime Agency has told Bleepingcomputer that it is working closely with the MoJ and the National Cyber Security Center in the UK to investigate the incident and support the LAA’s ongoing investigation.
“We know about a cyber incident affecting the legal aid agency. NCA officials are working with the participants at the National Cyber Security Center and to better understand the MOJ incident and support the department,” said the NCA.
Cyber attacks targeting Britain’s retailers
The event follows the high-profile cybercatac that targets co-up, harrows, and Marx and Spencer (M&S) UK retail chain. The Dragonforce ransomware operation claimed all three attacks, and the Blapping computer has learned that the danger actors who orkstrate them or have used the same social engineering attacks that were to dissolve co–op and M&S.
Last week, the M&S was killed by a dragonforce ransomware attack using the scattered spider strategy. The attack disrupts online order, contactless payments and the company’s click and assembled service.
Co-op also banned VPN access as a precaution after another cyber incident, which hit his system and confirmed on Friday that the attackers stole data related to “a significant number of our current and previous members”.
On Friday, May 1, Harrods confirmed that it prohibits the internet usage to sites even after the danger actors, which tries to dissolve its network, suggests an active response to a cyber attack, although a violation remains to be confirmed.
Since then, the country’s National Cyber Security Center (NCSC) has published guidance and has advised all UK organizations to follow it to strengthen their cyber security rescue. The agency also warned that these cyber attacks should be seen as a “wake-up call” for all UK businesses, as any of them can become the next target in Hackers Crosshare.