The UK Ministry of Defence (MoD) is grappling with a significant data breach, as reported by Sky News. The breach has exposed sensitive information belonging to service personnel and veterans, potentially including names and bank details. According to Sky News’ investigative sources, China is suspected to be behind the cyberattack. The targeted system, distinct from the MoD’s main computer network, has been shut down for investigation and assessment.
While the MoD has not officially confirmed the source of the attack or the full extent of the breach, the incident underscores serious concerns regarding the security of personnel data and the potential repercussions for those affected.
China is alleged to have made multiple hacking attempts targeting MoD employees, including personnel involved in a payroll system that encompasses current service members and some veterans. Primarily, the exposed information comprises names and bank details, and assurances have been given that all salaries will be disbursed this month.
Conservative MP and former soldier Tobias Ellwood expressed to Sky News his belief that China may have targeted financially vulnerable individuals with the aim of coercion in exchange for cash.
According to the BBC, Defence Secretary Grant Shapps is scheduled to provide an update to Members of Parliament in the Commons on Tuesday regarding the hack. He is anticipated to outline a comprehensive response plan, including measures to safeguard affected servicemen and women.
The recent update to the government’s defense strategy warned of a significant rise in cyberattacks by both state and non-state actors, encompassing spyware, ransomware, and offensive hacking tools.
This incident is not the first time China has been implicated in cyber activity directed at the UK. In March 2024, the UK government publicly accused China of a cyberattack in August 2021 that compromised voter data held by the Electoral Commission.
Further exacerbating concerns, the National Cyber Security Centre (NCSC) attributed a cyberattack in December 2023 aimed at disrupting UK political processes to Russian intelligence, highlighting ongoing efforts by multiple state actors to undermine UK cybersecurity.