Data Leak Prompted Secret Relocation of Thousands of Afghans to the UK

By Scott Ikeda for CPO Magazine
Tuesday, July 22, 2025

• 629
• 1
• 1
• 1
• More

Some key details about the data leak are still not known to the public. It has been established that a British soldier sent the errant email in 2022 and that the matter appeared to be an accident (with the soldier forwarding the entire spreadsheet instead of what was supposed to be a very limited sampling of it), but it remains unclear who the “external party” who received it was or how it might have made its way to either the Taliban or the public 2023 Facebook post from there. About 1,000 Afghans on the list are preparing a lawsuit against the Ministry of Defence, seeking at least £50,000 each.

Dr. Kolochenko, CEO at ImmuniWeb, notes that these emerging details about the data leak will be key in the coming days: “This is a fairly unique and remarkably sad example of how a single data breach may pose a real threat to thousands of human lives. Whilst some cybersecurity vendors tend to exaggerate both the amplitude and consequences of data breaches, sometimes really nasty thing happen, as tellingly evidenced by this case. The question here is who will be accountable and financially liable for the consequences of this cybersecurity disaster? Given that full technical details of the breach are currently unknown, it would be premature to make conclusions, however, such major incidents rarely, if ever, occur without implication of third-party’s negligence, for example, of an IT or even cybersecurity vendor. Currently the financial burden is on British taxpayers, therefore, a thorough investigation is needed to better understand the root cause of the disastrous data breach, seek monetary compensation from all responsible parties to the fullest extent permitted by law, and ensure that such incidents will not happen again.” Read Full Article