Note Gossi's "If". There's no indication so far wrt possible payment.
There's nothing "likely" about it.
> On Friday 16 May we discovered the attack was more extensive than originally understood and that the group behind it had accessed a large amount of information relating to legal aid applicants.
> We believe the group has accessed and downloaded a significant amount of personal data from those who applied for legal aid through our digital service since 2010.
> This data may have included contact details and addresses of applicants, their dates of birth, national ID numbers, criminal history, employment status and financial data such as contribution amounts, debts and payments.
source: https://www.gov.uk/government/news/legal-aid-agency-data-bre...
Ransomed by Jeff Bezos.
> Legal aid is the provision of assistance to people who are unable to afford legal representation and access to the court system. Legal aid is regarded as central in providing access to justice by ensuring equality before the law, the right to counsel and the right to a fair trial.
> The Legal Aid Agency is an executive agency of the Ministry of Justice (MoJ) in the United Kingdom. It provides both civil and criminal legal aid and advice in England and Wales.
egorfine•3h ago
And that's about it. No repercussions will take place.
tgv•3h ago
celticninja•2h ago
aaronmdjones•1h ago
1) Someone left an unpatched server exposed to the Internet for months with a known critical vulnerability.
2) Someone uploaded the data to a world-readable S3 bucket or similar, or left it in an Internet-accessible database server with no authentication.
3) Someone with administrative credentials was using the password "password1!" or similar with no two-factor authentication.
In an ideal world (not the world we live in), in these cases, that someone would be prosecuted for gross negligence.
pjc50•1h ago
Something similar happened to the British Museum a couple of years ago. Almost certainly an even worse pay/qualifications employer.
egorfine•1h ago
So, shall we not protect people's data?
jaoane•1h ago
These are professionals. It’s their responsibility to build a solid, secure system. If they can’t or don’t want to then they should find another job.
oaththrowaway•1h ago
egorfine•1h ago
Real situation btw.
harvey9•19m ago
egorfine•1h ago
Personally, I do not see any other way out of this other than somehow criminalizing running outdated software.
egorfine•1h ago
buserror•6m ago