Afghan Data Breach: A Mess of Mistakes That Could Repeat, MPs Warn

The Afghan data leak was described as 'a mess of mistakes and poor decisions' that could occur again very easily, according to an in...

The Afghan data leak was described as 'a mess of mistakes and poor decisions' that could occur again very easily, according to an investigation by Members of Parliament.

In 2022, the UK suffered the loss of a crucial database containing information on Afghans and British officials, endangering the lives of 100,000 individuals.

In 2023, when the Daily Mail uncovered this data breach crisis, the Government secured a super-injunction — a strict court order — to keep it quiet, leading to a 23-month hidden legal struggle in secret courts over the principle of open justice.

This July, the Government ultimately ceased its efforts to suppress the truth, revealing that officials had secretly approved a £7 billion plan featuring a large-scale evacuation initiative aimed at saving thousands of Afghans who had assisted British military personnel.

Our startling disclosures led to four parliamentary investigations, and today, senior members of the Public Accounts Committee stated they are 'not confident' that defense officials have taken sufficient measures to avoid a similar catastrophe.

Chairman Sir Geoffrey Clifton-Brown stated: 'It is the responsibility of this committee to examine the series of mistakes and misjudgments that resulted in, and occurred after, the Afghan data leak.'

The Ministry of Defence stored the lost data in Excel files instead of using a dedicated data management system. Additionally, this major security incident was not the first time the MOD had experienced a data leak.

Sir Geoffrey stated, "The Ministry of Defence was aware of its actions – it understood the dangers of employing insufficient systems to manage confidential personal data as the security situation in Afghanistan worsened."

These dangers became evident through numerous data leaks over the years, eventually leading to the 2022 incident, which posed a serious threat to thousands of people and cost taxpayers hundreds of millions of pounds, at minimum.

I have no satisfaction in my role as chair of this committee in expressing that we do not have confidence in the MoD's present capacity to stop such an incident from occurring again.

The committee criticized the choice to keep Parliament uninformed for two years. Reporters from the Daily Mail and other outlets risked imprisonment if they disclosed the scandal or even mentioned the existence of the super-injunction, while officials chose not to notify any parliamentary committees.

Even if they met secretly in October 2024 to approve a £7 billion deal, the public was neither asked nor informed, and they did not disclose this to the Public Accounts Committee, which is responsible for overseeing expenditures.

Military officials informed a director at the National Audit Office, the government spending monitor, that there was 'a confidential issue,' without providing any specifics regarding the significant public funding they were secretly pursuing.

Sir Geoffrey stated, "Our investigation has uncovered the sequence of events that prevented the PAC and the National Audit Office from carrying out their duties for the benefit of taxpayers."

The openly disorganized choice to inform a single director at the NAO about a confidential issue that couldn't be disclosed, without notifying the NAO's leadership, reflects the standard of decision-making at the MoD.

The PAC's report, released today, states: 'The MoD has not met the expectations of the public and Parliament regarding the management of confidential personal data, and the PAC's report demands a complete list of measures being implemented to avoid future data leaks.'

In September, the NAO criticized military leaders for failing to clarify the enormous expenses of the Afghanistan operation to the public, stating: 'The Ministry of Defence is unable to accurately determine how much it has spent. It has not supplied sufficient evidence to assure the National Audit Office.'

The NAO stated that the total number of people eventually relocated to the UK might reach 27,278 - almost four thousand higher than anticipated.

The financial oversight body claimed the MOD did not supply it with 'adequate proof' to ensure the accuracy of the costs related to the breach as reported by the department.

The MOD stated: 'The data breach that occurred during the previous administration in 2022 was unacceptable, and although the Committee recognizes that procedures have enhanced, we are still implementing modifications and advancements in data management throughout the department, including the implementation of a specialized, secure case management system for Afghan resettlement.'

It stated that "the total financial cost has never been hidden," with the projected expenses for the airlift initiated following the data breach estimated at £850 million.

Read more

• Was the Ministry of Defence involved in hiding risks to 100,000 Afghans by leaking confidential information, according to hidden legal disputes?
• What major mistakes caused the MoD to experience its third severe data breach affecting vulnerable Afghans since 2021?
• What caused a major data leak to endanger the lives of courageous Afghans who supported UK troops, remaining concealed for years?
• What impact has a severe data breach had on Afghan heroes, leading to thousands seeking asylum and costing an astonishing £7 billion?
• Could a significant £7 billion financial setback impact the UK due to the disclosure of Afghan troop information?