Breachesby GlyphLegal Aid Agency
Disclosed Feb 26, 2024265 affectedSettled
Emails sent without BCC exposed 265 recipients' addresses; ICO fine of GBP 350,000
The Ministry of Defence sent emails using the To field instead of BCC, disclosing 265 unique email addresses. The ICO fined the MOD GBP 350,000.
What is known
| People affected | 265 (as reported by the organization) |
|---|---|
| Disclosed | Feb 26, 2024 |
| Attack | Insider |
| Data exposed | Emails |
| Sector | Government · GB |
| Status | Settled |
| Lawsuit or fine | GBP 350,000 ICO fine (about $440K) |
Sources
Notices filed
Other breaches at Legal Aid Agency
Legal Aid Agency cyberattack: Compromised data goes back to 1978Legal Aid Agency cyberattack: Compromised data goes back to 1978HackingGovernmentGBUnverifiedOct 15Hackers download legal aid applicant data dating back to 2010Hacking exposed names, addresses, dates of birth, government IDs, employment records and financial details.HackingGovernmentGBMay 19, 2025Armed forces payroll system breach exposes 272,000 personnel and veteransVendor breach exposed names, financial details and addresses.Vendor breach272K affectedGovernmentGBUnverifiedMay 7, 2024Two lost discs held child benefit data of 25 million UK residentsLost or stolen device exposed names, addresses, dates of birth, government IDs, financial details and children's data.Lost or stolen device25M affectedGovernmentGBUnverifiedNov 20, 2007
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.