All NewsEducationTV
Equities & FundsCrypto & Digital AssetsAI & TechnologyBusiness & CorporateUS Politics & PolicyGeopolitics & Global RiskMacro, Rates & FXCommodities & EnergyEuropean Politics & MarketsAsia-PacificReal Estate & Property
Story archiveAll categories
← All Stories

UK MoD Afghan data breach a foreseeable failure, inquiry finds

Created at 29 Jul · 11:32 PM1 source↑ Market-relevant
IN SHORT

A parliamentary inquiry found the UK Ministry of Defence's data breach exposing Afghan applicants' details was a "foreseeable systemic failure." The report criticized the MoD's handling of the Afghan Relocations and Assistance Policy (Arap) scheme, citing inadequate tools, procedures, and data protection.

✉Newsletter

PiQ Daily

Pick your topics. Get only what matters, on your cadence.

Key Numbers

18,500Afghan applicants' details exposed in data breach
July 2025Date reporting ban on breach was lifted
two yearsDuration of super-injunction
884Former Afghan special forces rejections overturned

Who's Involved

Defence Committee
parliamentary inquiry finding MoD data breach foreseeable
Ministry of Defence (MoD)
criticized for data breach and running Afghan relocation scheme
Tan Dhesi
Committee chairman questioning MoD's role in immigration casework
Grant Shapps
then-Defence Secretary who pushed back against briefing parliamentarians
John Healey
then-shadow defence secretary

↳ Why This Matters

The inquiry highlights significant failings in the UK government's handling of sensitive personal data for vulnerable individuals fleeing conflict, raising serious questions about accountability, operational competence, and the protection of those who aided British forces.

Key facts

  • A parliamentary inquiry found the UK Ministry of Defence's data breach exposing Afghan applicants' details was a "foreseeable systemic failure."
  • The breach involved over 18,500 applicants to the Afghan Relocations and Assistance Policy (Arap) scheme.
  • A super-injunction prevented reporting on the breach for nearly two years.
  • The inquiry criticized the MoD's use of Excel and its overall handling of the relocation scheme.
  • Afghan special forces members who served with UKSF expressed fear for their lives after their rejections were overturned.
  • A legal challenge is ongoing from former Afghan special forces unable to reach the UK.

A parliamentary inquiry has concluded that a data breach exposing the personal details of thousands of Afghans applying to come to the UK was a "foreseeable systemic failure." The Commons' Defence Committee's report, published on Thursday, stated that the Ministry of Defence (MoD) lacked the necessary expertise to manage the Afghan Relocations and Assistance Policy (Arap) scheme after the Taliban's takeover of Afghanistan.

The committee criticized the MoD's operational procedures, training, and data protection culture, highlighting the use of inappropriate tools like Excel as a "continuing cultural failure." The breach, which came to light in August 2023, involved the data of over 18,500 applicants. A super-injunction, initially expected to last four months, prevented reporting on the incident for nearly two years, which the committee chairman, Tan Dhesi, described as imposing "serious costs on accountability and trust."

Dhesi asserted that the MoD should "stick to defence" and not be responsible for immigration casework. The report also questioned the government's policy of secrecy surrounding special forces matters, suggesting it had been used as a "shield against proper accountability." The committee was unable to confirm reports that the breach was linked to the involvement of UK special forces in deciding on the relocation of Afghan special forces, but raised concerns over the handling of these cases.

Many former Afghan special forces members, who served alongside UK forces, have expressed fear for their lives since the Taliban's return. The report noted that a significant proportion of decisions to reject these individuals were subsequently overturned, demonstrating the seriousness of the MoD's failure. A legal challenge is currently before the Royal Courts of Justice from former Afghan special forces families struggling to escape to the UK, with one family reportedly having only "$200 left to survive."

A MoD spokesperson acknowledged that the incident "should never have happened" and committed to learning lessons, stating that reforms including improved data protection standards and strengthened case-working processes are already in place. The ministry welcomed the scrutiny and committed to concluding the resettlement program.

Frequently asked questions

The Arap scheme was established in April 2021 to help individuals in Afghanistan who feared for their lives due to their work with British armed forces, aiming to resettle eligible applicants and their families in the UK.

A spreadsheet containing personal details of over 18,500 Arap scheme applicants was exposed, a failure attributed to systemic issues rather than an individual mistake.

A super-injunction is a court order that prohibits reporting on private or sensitive information and also forbids revealing the existence of the injunction itself.

The MoD was criticized for lacking expertise in running immigration casework, using inappropriate tools like Excel, having weak operating procedures, insufficient training, poor organizational continuity, and an inadequate culture of data protection and accountability.

What Happens Next

01The MoD will continue to work closely with the Defence Committee on this issue.
02The government aims to conclude the Afghan resettlement program by the end of this Parliament.

Get the newsletter.

Pick the topics you actually care about. We'll email when there's news worth your time, on the cadence you choose. Cancel any time from your account.

Cadence

How It Developed

A data breach exposed personal details of thousands of Afghans applying to come to the UK.
The Commons' Defence Committee stated the Ministry of Defence (MoD) lacked expertise to run the Afghan relocation scheme.
The MoD used secrecy as a "shield" against accountability, according to the inquiry.
A super-injunction prevented reporting on the breach until July 2025, lasting nearly two years.
The report identified systemic failures due to inappropriate tools, weak procedures, insufficient training, and poor data protection culture.
The spreadsheet contained data of over 18,500 Arap scheme applicants.
The committee criticized the MoD's use of Excel and the overall inadequacy of the Afghan relocation scheme.
The report questioned the government's policy of not commenting on special forces matters in relation to the breach.

Sources

T1
UK inquiry finds MoD Afghan data breach was foreseeable failureBBC News

Related Stories

Victorian cults inquiry accidentally shares survivor emails with group members
29 Jul · 8:16 AM
Hackers steal sensitive data from Department for Education and police
29 Jul · 7:21 PM
Report finds UK antisemitism rise largest outside Israel
29 Jul · 4:21 AM
New Zealand to buy strike drones, boost local defence industry
29 Jul · 3:06 AM
Burnham places Trident renewal at heart of defence spending plans
29 Jul · 9:41 PM