Legal Aid Agency
Disclosed Feb 26, 20242 years ago265 affectedSettled
Emails sent without BCC exposed 265 recipients' addresses; ICO fine of GBP 350,000
The Ministry of Defence sent emails using the To field instead of BCC, disclosing 265 unique email addresses. The ICO fined the MOD GBP 350,000.
What is known
| People affected | 265 (as reported by the organization) |
|---|---|
| Disclosed | Feb 26, 2024 |
| Attack | Insider |
| Data exposed | Emails |
| Sector | Government · GB |
| Status | Settled |
| Lawsuit or fine | GBP 350,000 ICO fine (about $440K) |
Sources
| Source | |
|---|---|
| ICO: Ministry of Defenceico.org.uk · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Feb 26, 2024 | 265 |
Other breaches at Legal Aid Agency
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Hackers download legal aid applicant data dating back to 2010May 19, 20251 year agoHacking | May 19, 20251 year ago | Hacking | Government | Confirmed | Unknown |
| Armed forces payroll system breach exposes 272,000 personnel and veteransMay 7, 20242 years agoVendor breachUnverified | May 7, 20242 years ago | Vendor breach | Government | Unverified | 272K |
| Two lost discs held child benefit data of 25 million UK residentsNov 20, 200718 years agoLost or stolen deviceUnverified | Nov 20, 200718 years ago | Lost or stolen device | Government | Unverified | 25M |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.