Personal data taken in UK legal aid cyber attack