Select committee: Public Accounts Committee

Conclusion 24

59th Report - Ministry of Justice follow-up: Autumn 2025 Published 7 Jan 2026 Addressed to HM Treasury
Conclusion (the committee's words)
MoJ and LAA acknowledged that the cyberattack on LAA’s online digital services began in December 2024, four months before the LAA detected the attack on 23 April 2025.46 LAA explained that in April, it took action to boost the security of the systems concerned and informed legal aid providers that their bank details may have been compromised. However, it did not take its systems down until 16 May 2025.47

From: Public Accounts Committee, 59th Report - Ministry of Justice follow-up: Autumn 2025 (HC 1240), 7 January 2026

Government response

The government responded to the whole report on 1 April 2026 (deadline 7 March 2026).

Summary written by Accountability Index from the government's response. It is not the government's own words.

The government states that it "agrees with the Committee's recommendation" on each of the recommendations in the response, reporting some as implemented and giving target dates for others.

  • On Dartmoor, HMPPS has reviewed its handling of the lease negotiations and identified areas of learning. MoJ and HMPPS will write to the Committee "once the proposed approach to remediating Dartmoor has been decided", with a target date of June 2026.
  • On access to legal aid for the digitally excluded, an Ipsos civil demand feasibility study will report by the end of March 2026. The department will report back to the Committee on progress in October 2026.
  • On market sustainability, the department will "explore options to routinely monitor the profitability of legal aid firms" and update the Committee in October 2026. Any future policy decisions will be "in the context of the department's spending review settlement".
  • On the cyberattack, MoJ and LAA say lessons have already been shared across government. MoJ states that it "has allocated funding to the transformation of LAA systems over the 2026-2029 period".

Read the government's response ↗ Report an error