5 ms·

> The Legal Aid breach is, I’m told, a ransomware/extortion group (not mentioned in the notice). If it looks like the UK gov are going to pay, or pay via third

> The Legal Aid breach is, I’m told, a ransomware/extortion group (not mentioned in the notice). If it looks like the UK gov are going to pay, or pay via third party, this one will become a megathread. https://www.gov.uk/government/news/legal-aid-agency-data-breach https://www.gov.uk/government/news/legal-aid-agency-data-bre... -- https://cyberplace.social/@GossiTheDog/114533584686916433 https://cyberplace.social/@GossiTheDog/114533584686916433 Note Gossi's "If". There's no indication so far wrt possible payment.

celticninja 1y ago
They are not going to pay anything I guarantee it. There is no randomware. They shut their services down before the attacker could deploy ransomware although the attacker likely accessed data.
- alias_neo 1y ago
  > likely accessed data There's nothing "likely" about it. > On Friday 16 May we discovered the attack was more extensive than originally understood and that the group behind it had accessed a large amount of information relating to legal aid applicants. > We believe the group has accessed and downloaded a significant amount of personal data from those who applied for legal aid through our digital service since 2010. > This data may have included contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history, employment status and financial data such as contribution amounts, debts and payments. source: https://www.gov.uk/government/news/legal-aid-agency-data-breach https://www.gov.uk/government/news/legal-aid-agency-data-bre...
Urahandystar 1y ago
The UK government does not pay ransomware and advises private businesses not to also. https://www.ncsc.gov.uk/section/respond-recover/ml-ransomware-attack https://www.ncsc.gov.uk/section/respond-recover/ml-ransomwar...
- moreati 1y ago
  I wasn't trying to suggest they wil. I emphasised Gossi's If because I missed it on my first read. I didn't want others making the same mistake.
  - pixxel 1y ago
    [dead]
- blitzar 1y ago
  The official positions of Governments is counter to the actual behaviour in many many circumstances.
blitzar 1y ago
> Looks like they were doing everything on AWS for about 6 years. Ransomed by Jeff Bezos.
- echelon_musk 1y ago
  Ransom refers to when a person or thing is released, not when it's taken. Do you mean stolen by Jeff Bezos, or to imply that AWS has another copy of the data?

celticninja 1y ago

They are not going to pay anything I guarantee it. There is no randomware. They shut their services down before the attacker could deploy ransomware although the attacker likely accessed data.

alias_neo 1y ago
> likely accessed data There's nothing "likely" about it. > On Friday 16 May we discovered the attack was more extensive than originally understood and that the group behind it had accessed a large amount of information relating to legal aid applicants. > We believe the group has accessed and downloaded a significant amount of personal data from those who applied for legal aid through our digital service since 2010. > This data may have included contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history, employment status and financial data such as contribution amounts, debts and payments. source: https://www.gov.uk/government/news/legal-aid-agency-data-breach https://www.gov.uk/government/news/legal-aid-agency-data-bre...

Urahandystar 1y ago

The UK government does not pay ransomware and advises private businesses not to also. https://www.ncsc.gov.uk/section/respond-recover/ml-ransomware-attack https://www.ncsc.gov.uk/section/respond-recover/ml-ransomwar...

moreati 1y ago
I wasn't trying to suggest they wil. I emphasised Gossi's If because I missed it on my first read. I didn't want others making the same mistake.
- pixxel 1y ago
  [dead]
blitzar 1y ago
The official positions of Governments is counter to the actual behaviour in many many circumstances.

blitzar 1y ago

> Looks like they were doing everything on AWS for about 6 years. Ransomed by Jeff Bezos.

echelon_musk 1y ago
Ransom refers to when a person or thing is released, not when it's taken. Do you mean stolen by Jeff Bezos, or to imply that AWS has another copy of the data?