Legal Aid Agency must get a grip after cyber attack