Legal Aid Agency

The Legal Aid Agency (LAA) is the public body responsible for administering legal aid in England and Wales. It processes applications for legal aid and allocates funding to solicitors’ firms, barristers, not‑profit organisations and telephone operators that provide services under the legal aid scheme. The agency manages the payment of claims, ensuring that providers receive reimbursement for work undertaken on behalf of eligible clients. In addition to financial administration, the LAA operates an online portal through which providers submit claims and access guidance.

According to the information provided, the LAA oversees billions of pounds of legal aid funding each year. This funding supports nearly two thousand solicitors’ firms, barristers, not‑profit groups and telephone operators operating across England and Wales. The agency employs approximately twelve hundred staff who work across its various functions. Its headquarters is located in the United Kingdom, reflecting its national remit.

As an executive agency of the Ministry of Justice, the LAA sits at the centre of the legal aid regulatory framework. It works closely with the Ministry of Justice, the National Crime Agency and the National Cyber Security Centre, particularly when responding to security incidents affecting its systems. The LAA’s role includes maintaining the integrity of payment data and protecting the personal information of both providers and citizens. Recent cyber security incidents have highlighted the agency’s focus on incident response, mitigation and the ongoing modernisation of its identity management and technology infrastructure.

Structurally, the LAA is a non‑departmental public body that reports directly to the Ministry of Justice. It does not have a parent company or subsidiaries beyond its placement within the UK government structure. The agency’s accountability to ministers and parliament ensures that its operations align with broader justice policy objectives.

On 1 November 2025 the Legal Aid Agency announced a cyber security incident that may have exposed the financial information of legal aid providers. The agency stated that it could not confirm exactly what data had been accessed but noted that payment details might have been compromised. In response, the LAA said it was working with the Ministry of Justice, the National Crime Agency and the National Cyber Security Centre to investigate the breach and had taken steps to mitigate any impact. An apology was issued to affected law firms while the agency strengthened its security measures.

On 1 May 2025 a similar disclosure was made, describing a cybersecurity incident at the government body that oversees legal funding and could have compromised financial information of solicitors and barristers. The statement indicated that the breach was under joint investigation with national law enforcement and cybersecurity authorities. Mitigation measures were implemented and the agency apologised for any potential impact while reiterating its commitment to data security.

On 31 December 2024 the LAA reported that a cyberattack had compromised its online portal, resulting in unauthorised access to legal aid providers’ information and sensitive personal data belonging to citizens over an extended period. The attack caused significant service disruptions, prompting a phased restoration of services and a migration to a new identity management system for all providers. Recovery efforts from the incident accelerated the agency’s plans to modernise its technology infrastructure and replace legacy systems with more resilient solutions.