The UK Says a Huge Payroll Data Breach by a ‘Malign Actor’ Has Exposed Details of Military Personnel

The UK Says a Huge Payroll Data Breach by a ‘Malign Actor’ Has Exposed Details of Military Personnel

May 7, 2024 at 03:37PM

A data breach exposed the names and bank details of thousands of British armed forces personnel, possibly with state involvement. The breach occurred at a payroll system holding up to 272,000 individuals’ data, prompting an investigation. Though not confirmed, Chinese hackers are suspected, sparking national security concerns and diplomatic responses. SSCL, the contractor involved, has ties to the British government and other organizations.

From the meeting notes, it is evident that a data breach has exposed the names and bank details of thousands of serving British armed forces personnel and recent veterans. The breach occurred at a third-party payroll system, with as many as 272,000 individuals affected, and in a few cases, addresses may also have been exposed.

Defense Secretary Grant Shapps has indicated that the system has been taken offline, and an investigation has been launched into the breach and possible failings by the contractor, SSCL. While Shapps did not confirm reports of Chinese hackers being suspected, he did suggest that state involvement cannot be ruled out.

These events have raised questions in the House of Commons, with Labour Party defense spokesman John Healey questioning the government’s stance on the media’s reports regarding China’s involvement in the cyberattack. On the other hand, China’s Ministry of Foreign Affairs has stated its opposition to all forms of cyberattacks and deliberate use of cybersecurity issues for political purposes.

Additionally, it is noted that SSCL is a joint venture between the British government and a private tech firm, with the government having sold its final stake in the firm last year. This situation occurs in the context of previous allegations that hackers linked to the Chinese government had targeted U.S. and UK entities, resulting in sanctions and charges against alleged hackers residing in China.

Overall, the meeting notes reflect concerns about a significant data breach affecting British armed forces personnel, with evolving discussions around the potential involvement of state actors and the broader geopolitical implications of cyberattacks.

Full Article