Source · Select Committees · Public Accounts Committee
Recommendation 26
26
Legal Aid Agency acknowledges critical lessons learned from cyberattack response and provider burden
Conclusion
LAA acknowledged that contingency measures it put in place to keep the legal aid system going placed additional burdens on providers, and that there are several lessons to be learned from the attack. This included, ensuring senior leaders understand risks in systems, ensuring longer term business continuity plans are in place and considering the impact on staff of responding to the attack, which it said had been brutal. It also stressed the importance of consistent communication and collaboration with stakeholders to work through the response.51
Government Response
A response document is linked to this report, dated 1 April 2026. Response attribution to this conclusion has not been verified. Read the response document ↗