The Ministry of Defence (MoD) has suffered a significant data breach, with hackers accessing the personal information of an unknown number of serving UK military personnel. The attack targeted a payroll system managed by an external contractor, which contained names, bank details, and in a small number of cases, addresses of current and former members of the Royal Navy, Army, and Royal Air Force.
The compromised data, described as 'personal HMRC-style information', spans several years. The MoD has taken immediate action by taking the system offline and launching an investigation. No operational MoD data is believed to have been accessed.
The MoD is notifying affected individuals and providing support, including informing veterans' organisations. Defence Secretary Grant Shapps is expected to update MPs on Tuesday and outline a multi-point plan to protect those affected.
The identity of the hackers remains unknown, but the breach occurs amid heightened warnings about cyber threats from hostile states. Last year, the government highlighted the proliferation of commercial spyware and ransomware. In March, China was publicly accused of a 2021 hack on the Electoral Commission, and in December 2023, Russian intelligence was linked to attempts to interfere in UK politics.
The Metropolitan Police has stated it is not currently involved in the investigation.
