MoD Data Breach risks lives

An email to people who worked for British Forces and are seeking relocation to the UK mistakenly made addresses visible to all recipients.

This is not a new story. This happens all the time in everyday lives. However, this time it is deadly serious and needlessly endangered lives. The Ministry of Defence is investigating but this really should not have happened in the first place!

The email was sent by the MoD to interpreters who are seeking relocation to the UK. The mail asked for an update on their situation but the sender mistakenly copied in their email addresses, so they were visible to all other recipients.

The Ministry says it has contacted the individuals affected by the data breach and is offering advice on how to manage the potential risks.

Many of the people who worked with western forces are hiding from the Taliban. The UK evacuated more than 17,000 people amid chaotic scenes at Kabul airport. As a result, many of those who assisted British troops, were left behind.

The Email

The email came from the Afghan Relocations and Assistance Policy (ARAP). It advised those still stranded that ARAP was doing everything possible to get them to safety. It also advised recipients not to risk leaving their current location if it was not safe. ARAP has been helping those still stuck in the country, as well as people who fled to neighbouring countries following the troop withdrawal.

However, one interpreter who received the email told the BBC: “This mistake could cost the life of interpreters, especially for those who are still in in Afghanistan. “Some of the interpreters didn’t notice the mistake and they replied to all the emails already and they explained their situation which is very dangerous. The email contains their profile pictures and contact details.”

Ben Wallace, the current defence secretary, described the breach as unacceptable. Former defence Johnny Mercer said that the error meant Afghan translators would be “moving house again tonight”. John Healey, the shadow defence secretary, said: “We told these Afghans interpreters we would keep them safe. Instead, this breach has needlessly put lives at risk. Wallace has apologised.

Old Habits?

Sadly, this is not the first data breach this year. Sensitive documents were discovered at a bus stop in Kent in June 2021. Clearly, the MoD needs to get its house in order.

An MoD spokesperson said: “An investigation has been launched into a data breach of information from the Afghan Relocations Assistance Policy team. We apologise to everyone impacted by this breach and are working hard to ensure it does not happen again”.

“The Ministry of Defence takes its information and data handling responsibilities very seriously.”

The spokesperson added that it would be inappropriate to comment on the specifics of the case at this time but that the department is taking all necessary steps under UK GDPR.

In a recent update, the MoD has confirmed that an official has been suspended and the matter has been referred to the Information Commissioner’s Office. I wonder if any data privacy training has been offered to the unfortunate official?

Don’t let this happen to your business!

If you need advice or guidance then call us on 03333 22 1011 or you can contact us here.