Incident

UK Ministry of Defence reports data breach exposing over 250k armed forces members


Learn More

The UK's Ministry of Defence (MoD) is reporting a data breach affecting over 250,000 current and former armed services personnel. The breach targeted a third-party payroll system managed by a contractor, which contained sensitive information including:

  • names,
  • bank details,
  • in some cases, addresses.

The breach was confirmed by the MoD after initial reports by major news outlets like the BBC, Sky News, and The Guardian. It has been alleged that the attack was conducted by Chinese state-affiliated actors. The UK government has not officially named the responsible party.

MoD claims to have shut down the affected external network and systems and ensures the security of its main systems. Personel is assured that there has been no delay in salary payments, though some minor delays in expense reimbursements may occur.

The MoD is actively working with affected personnel, offering them specialist advice and access to a personal data protection service to monitor the unauthorized use of their information. Despite the breach, the MoD reassures that no evidence currently suggests that any data was actually removed from the system.

UK Ministry of Defence reports data breach exposing over 250k armed forces members