Almost 7,000 Afghan nationals are being relocated to the UK following a massive data breach by the British military that successive governments tried to keep secret with a superinjunction.
The blunder exposed the personal information of close to 20,000 individuals, endangering them and their families – with as many as 100,000 people impacted in total.
The UK only informed everyone on Tuesday – three-and-a-half years after their data was compromised.
The Ministry of Defence (MoD) said the relocation costs alone directly linked to the data breach will be around £850m. An internal government document from February this year said the cost could rise to £7bn, but an MoD spokesperson said that this was an outdated figure.
However, the total cost to the taxpayer of existing schemes to assist Afghans who are deemed eligible for British support, as well as the additional cost from the breach, will come to at least £6bn.
In addition, litigation against the UK arising from the mistake could add additional cost, as well as whatever the government has already spent on the superinjunction.
Details about the blunder can finally be made public after a judge lifted the injunction that had been sought by the government.
Please use Chrome browser for a more accessible video player
2:46
Defence secretary on Afghan leak
Barings Law, a law firm that is representing around 1,000 of the victims, accused the government of trying to hide the truth from the public following a lengthy legal battle.
Defence Secretary John Healey offered a “sincere apology” for the data breach in a statement to MPs in the House of Commons on Tuesday afternoon.
He said he had felt “deeply concerned about the lack of transparency” around the data breach, adding: “No government wishes to withhold information from the British public, from parliamentarians or the press in this manner.”
The previous Conservative government set up a secret scheme in 2023 – which can only now be revealed – to relocate Afghan nationals impacted by the data breach but who were not eligible for an existing programme to relocate and assist individuals who had worked for the British government in Afghanistan.
Some 6,900 Afghans – comprising 1,500 people named on the list as well as their dependents – are being relocated to the UK as part of this programme.
Image: Afghan co-workers and their families board a plane during the Kabul airlift in August 2021. Pic: South Korean Defense Ministry/ZUMA Press Wire/Shutterstock
This comes on top of the many thousands more who are being moved until the Afghan Relocation and Assistance Policy (ARAP). A lot of these individuals are also caught up in the data breach.
The Times, which has been battling the injunction, said a total of 18,500 people have so far been relocated to the UK, including those directly impacted plus their dependents.
Spotify
This content is provided by Spotify, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spotify cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spotify cookies.
To view this content you can use the button below to allow Spotify cookies for this session only.
Some 5,400 more Afghans who have already received invitation letters will be flown to the UK in the coming weeks, bringing the total number of Afghans affected by the breach being brought to the UK to 23,900. The rest of the affected Afghans will be left behind, the newspaper reported.
How did the data breach happen?
The disaster is thought to have been triggered by the careless handling of an email that contained a list of the names and other details of 18,714 Afghan nationals. They had been trying to apply to a British government scheme to support those who helped or worked with UK forces in Afghanistan that were fighting the Taliban between 2001 and 2021.
Image: People gathered desperately near evacuation control checkpoints during the crisis. Pic: AP
Image: The evacuation at Kabul airport was chaotic. Pic: AP
The collapse of the western-backed Afghan government that year saw the Taliban return to power. The new government regards anyone who worked with British or other foreign forces during the previous two decades as a traitor.
A source said a small number of people named on the list are known to have subsequently been killed, though it is not clear if this was a direct result of the data breach.
It is also not clear whether the Taliban has the list – only that the MoD lost control of the information.
Image: Taliban members on the second anniversary of the fall of Kabul. Pic: Reuters
Adnan Malik, head of data protection at Barings Law, said: “This is an incredibly serious data breach, which the Ministry of Defence has repeatedly tried to hide from the British public.
“It involved the loss of personal and identifying information about Afghan nationals who have helped British forces to defeat terrorism and support security and stability in the region.
“A total of around 20,000 individuals have been affected, putting them and their loved ones at serious risk of violence from opponents and armed groups.”
The law firm is working with around 1,000 of those impacted “to pursue potential legal action”.
It is thought that only a minority of the names on the list – about 10 to 15% – would have been eligible for help under the Afghan Relocation and Assistance Policy (ARAP).
The breach occurred in February 2022, when Boris Johnson was prime minister, but was only discovered by the British military in August 2023.
A superinjunction – preventing the reporting of the mistake – was imposed in September of that year.
It meant the extraordinary – and costly – plan to transport thousands of Afghans to the UK took place in secret until now.
Sir Keir Starmer’s government inherited the scandal.
What is a superinjunction?
In UK law, a superinjunction prevents the publication of certain information.
However, unlike a regular injunction, it also prevents the media from reporting on the existence of the injunction itself.
Superinjunctions can only be granted by the high court, with applicants required to meet stringent legal tests of necessity, proportionality and the risk of serious harm.
They are most commonly used in cases involving breaches of privacy, confidential business information, or where there is a risk of significant reputational damage.
Why was superinjunction lifted?
An internal review into the affair was launched at the start of this year by Paul Rimmer, a retired civil servant.
It played down the risk to those whose data is included in the breached dataset should it fall into the hands of the Taliban.
The review said it was “unlikely to substantially change an individual’s existing exposure given the volume of data already available”.
It also concluded that “it appears unlikely that merely being on the dataset would be grounds for targeting” and it is “therefore also unlikely that family members… will be targeted simply because the ‘principal’ appears… in the dataset”.
This is why a High Court judge ruled that the superinjunction could be lifted.
Mr Malik, however, said that he believes there is still a risk to those named in the breach.
He added: “Our claimants continue to live with the fear of reprisal against them and their families, when they should have been met with gratitude and discretion for their service.
“We would expect substantial financial payments for each claimant in any future legal action. While this will not fully undo the harm they have been exposed to, it will enable them to move forward and rebuild their lives.”
Latest MoD data breach
While the MoD’s data breach is by far the largest involving Afghan nationals, it is not the first.
Earlier this month, the MoD said Afghans impacted by a separate mistake could claim up to £4,000 in compensation four years after the incident happened.
Human error resulted in the personal information of 265 Afghans who had worked alongside British troops being shared with hundreds of others who were on the same email distribution list in September 2021.
In December 2023, the UK Information Commissioner fined the MoD £350,000 and said the “egregious” breach could have been life-threatening.
An Afghan man who worked for the British military has told Sky News he feels betrayed and has “completely lost (his) mind” after his identity was part of a massive data breach.
The man, who spoke anonymously to Sky News from Afghanistan, says he worked with British forces for more than 10 years.
But now, he regrets working alongside those troops, who were first deployed to Afghanistan in 2001.
Please use Chrome browser for a more accessible video player
1:59
Afghans being relocated after data breach
“I have done everything for the British forces … I regret that – why (did) I put my family in danger because of that? Is this is justice?
“We work for them, for [the] British, we help them. So now we are left behind, right now. And from today, I don’t know about my future.”
He described receiving an email warning him that his details had been revealed.
He said: “When I saw this one story… I completely lost my mind. I just thought… about my future… my family’s.
“I’ve got two kids. All my family are… in danger. Right now… I’m just completely lost.”
Spotify
This content is provided by Spotify, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spotify cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spotify cookies.
To view this content you can use the button below to allow Spotify cookies for this session only.
The mistake by the Ministry of Defence in early 2022 ranks among the worst security breaches in modern British history because of the cost and risk posed to the lives of thousands of Afghans.
On Tuesday, a court order – preventing the media reporting details of a secret relocation programme – was lifted.
Defence Secretary John Healey said about 6,900 Afghans and their family members have been relocated or were on their way to the UK under the previously secret scheme.
He said no one else from Afghanistan would be offered asylum, after a government review found little evidence of intent from the Taliban to seek retribution.
But the anonymous Afghan man who spoke to Sky News disputed this. He claimed the Taliban, who returned to power in 2021, were actively seeking people who worked with British forces.
“My family is finished,” he said. “I request… kindly request from the British government… the King… please evacuate us.
“Maybe tomorrow we will not be anymore. Please, please help us.”
This week, Yalda and Richard discuss Donald Trump’s big decision to send weapons to Ukraine through NATO. Why has he changed his mind?
Yalda gives her take on the situation and why she thinks Trump is following a similar position to presidents before him when it comes to Russian leader Vladimir Putin.
The two also discuss the UK’s secret Afghan immigration scheme after a massive data leak and gagged media. But how serious is this for those people still stuck in Afghanistan trying to flee the Taliban?
To get in touch or to share questions, email theworld@sky.uk
Towering waves, freezing temperatures and even some inquisitive killer whales. Iceland is doing its best to defeat Ross Edgley.Â
Inspired by “Thor”, the British extreme athlete is in the middle of a challenge worthy of the Norse god – spending four months swimming 1,000 miles around the whole of Iceland in the name of science.
And while it comes with its challenges – a video of parts of his tongue falling off because of the salty sea water went viral – there have also been moments of beauty in the rugged Viking landscape.
“We’re on the northern coast right now,” Ross tells Sky News as he prepares to get back in the water.
“There’s nothing to stop the wind coming from the Arctic, and it’s just smashing into the north of Iceland. We’re miles out, just like a bobbing cork getting absolutely battered.”
Image: Ross is making his way around Iceland clockwise after setting off from Reykjavik
But the punishing cold as 39-year-old Ross swims 30km (18 miles) a day around Iceland is something else.
More on Iceland
Related Topics:
“The body just takes a consistent battering,” he says, characteristically cheery and enthusiastic despite everything.
“You just do your best to keep it in some sort of shape, controlling the inevitable breakdown of your body, hoping that you get back into Reykjavik.”
Image: Some of the injuries Ross has picked up so far, and the salt water hinders healing
He’s eating between 10,000 and 15,000 calories a day – with pasta and his new favourite Icelandic liquorice as menu staples – just to keep going.
“You’re basically running through all of that food – I’m constantly saying it’s basically just an eating competition with a bit of swimming thrown in,” he chuckles. “But that’s genuinely what it is.”
His average day – storms permitting – sees Ross getting up and swimming for six hours, resting for six hours, and then getting back in the water to swim another six hours.
“You just do that on repeat. It’s really simple in theory, but brutal in reality.”
Image: Ross is covering about 18 miles (30km) a day
To get ready for the cool Icelandic waters, Ross took inspiration from animals that have made it their home for thousands of years: whales and seals.
“I ended up putting on about 10-15 kilos of just pure fat. A bit of muscle as well but a lot of fat.
“When you look at what sort of animals survive in Iceland, there’s that idea of sea blubber. You want insulation, you want body fat.”
Perhaps unlike a seal however, Ross takes great care to defend the reputation of the killer whales that hunt in Icelandic seas.
“We’ve seen a lot, pods of them have come by and checked me out, wondering what the strange Englishman was doing in Icelandic waters, and then we went our separate ways.
“I want to combat some of the bad PR that orcas might have because there’s never been a verified case of an orca attacking a human in the wild. It just doesn’t exist.
“They’re amazing animals that deserve our respect and shouldn’t be feared.”
Image: Ross back on board his support boat after swimming
There’s also a big scientific focus for Ross’s challenge as well.
“If we achieve this, it will achieve so much in terms of sports science – the first person to swim around Iceland. But that wasn’t a big enough reason to do it.”
Ross spoke to scientists who said that if he was “crazy enough” to want to do the swim, he would be able to collect daily samples of environmental DNA in the water, as well as levels of microplastics.
“By the end we’re just going to have this map of biodiversity around the whole coast of Iceland in a level of detail we’ve never really seen before. It’s going to be so comprehensive.
“So I think as the legacy of this swim, records and everything will be nice, but I actually think the science and the research that we contribute and give back will be unbelievable and actually make the chafing and losing parts of my tongue worth it.”
The swim is being paid for by a mix of sponsorships and self-funding.
Image: Ross Edgley is swimming 1,000 miles around Iceland. Pic: James Appleton/BMW
Ross says he was inspired to take on the challenge in part by actor Chris Hemsworth and his role as the Norse god Thor, joking that the feat would be the closest thing to swimming around Asgard, the realm of the deities from ancient Scandinavia.
As he makes his way around the island, he gets to meet a local community where stories of Nordic gods are still an important part of life.
“It’s amazing, we’re just hearing these stories of Nordic folklore, sagas written about every single fjord we go around. It’s unbelievable.”
Image: Ross and his team rest on land between swims
Fresh off one marathon swimming session, Ross and his team jumped into action to help the local community rescue 30 stranded whales.
“The team were absolutely exhausted… but having rescued the whales was the most rewarding moment as well.”
Image: A moment of downtime on the boat. Pic: Ross Edgley/YouTube
Follow the World
Listen to The World with Richard Engel and Yalda Hakim every Wednesday