Almost 7,000 Afghan nationals are being relocated to the UK following a massive data breach by the British military that successive governments tried to keep secret with a superinjunction.
The blunder exposed the personal information of close to 20,000 individuals, endangering them and their families – with as many as 100,000 people impacted in total.
The UK only informed everyone on Tuesday – three-and-a-half years after their data was compromised.
The Ministry of Defence (MoD) said the relocation costs alone directly linked to the data breach will be around £850m. An internal government document from February this year said the cost could rise to £7bn, but an MoD spokesperson said that this was an outdated figure.
However, the total cost to the taxpayer of existing schemes to assist Afghans who are deemed eligible for British support, as well as the additional cost from the breach, will come to at least £6bn.
In addition, litigation against the UK arising from the mistake could add additional cost, as well as whatever the government has already spent on the superinjunction.
Details about the blunder can finally be made public after a judge lifted the injunction that had been sought by the government.
Please use Chrome browser for a more accessible video player
2:46
Defence secretary on Afghan leak
Barings Law, a law firm that is representing around 1,000 of the victims, accused the government of trying to hide the truth from the public following a lengthy legal battle.
Defence Secretary John Healey offered a “sincere apology” for the data breach in a statement to MPs in the House of Commons on Tuesday afternoon.
He said he had felt “deeply concerned about the lack of transparency” around the data breach, adding: “No government wishes to withhold information from the British public, from parliamentarians or the press in this manner.”
The previous Conservative government set up a secret scheme in 2023 – which can only now be revealed – to relocate Afghan nationals impacted by the data breach but who were not eligible for an existing programme to relocate and assist individuals who had worked for the British government in Afghanistan.
Some 6,900 Afghans – comprising 1,500 people named on the list as well as their dependents – are being relocated to the UK as part of this programme.
Image: Afghan co-workers and their families board a plane during the Kabul airlift in August 2021. Pic: South Korean Defense Ministry/ZUMA Press Wire/Shutterstock
This comes on top of the many thousands more who are being moved until the Afghan Relocation and Assistance Policy (ARAP). A lot of these individuals are also caught up in the data breach.
The Times, which has been battling the injunction, said a total of 18,500 people have so far been relocated to the UK, including those directly impacted plus their dependents.
Spotify
This content is provided by Spotify, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spotify cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spotify cookies.
To view this content you can use the button below to allow Spotify cookies for this session only.
Some 5,400 more Afghans who have already received invitation letters will be flown to the UK in the coming weeks, bringing the total number of Afghans affected by the breach being brought to the UK to 23,900. The rest of the affected Afghans will be left behind, the newspaper reported.
How did the data breach happen?
The disaster is thought to have been triggered by the careless handling of an email that contained a list of the names and other details of 18,714 Afghan nationals. They had been trying to apply to a British government scheme to support those who helped or worked with UK forces in Afghanistan that were fighting the Taliban between 2001 and 2021.
Image: People gathered desperately near evacuation control checkpoints during the crisis. Pic: AP
Image: The evacuation at Kabul airport was chaotic. Pic: AP
The collapse of the western-backed Afghan government that year saw the Taliban return to power. The new government regards anyone who worked with British or other foreign forces during the previous two decades as a traitor.
A source said a small number of people named on the list are known to have subsequently been killed, though it is not clear if this was a direct result of the data breach.
It is also not clear whether the Taliban has the list – only that the MoD lost control of the information.
Image: Taliban members on the second anniversary of the fall of Kabul. Pic: Reuters
Adnan Malik, head of data protection at Barings Law, said: “This is an incredibly serious data breach, which the Ministry of Defence has repeatedly tried to hide from the British public.
“It involved the loss of personal and identifying information about Afghan nationals who have helped British forces to defeat terrorism and support security and stability in the region.
“A total of around 20,000 individuals have been affected, putting them and their loved ones at serious risk of violence from opponents and armed groups.”
The law firm is working with around 1,000 of those impacted “to pursue potential legal action”.
It is thought that only a minority of the names on the list – about 10 to 15% – would have been eligible for help under the Afghan Relocation and Assistance Policy (ARAP).
The breach occurred in February 2022, when Boris Johnson was prime minister, but was only discovered by the British military in August 2023.
A superinjunction – preventing the reporting of the mistake – was imposed in September of that year.
It meant the extraordinary – and costly – plan to transport thousands of Afghans to the UK took place in secret until now.
Sir Keir Starmer’s government inherited the scandal.
What is a superinjunction?
In UK law, a superinjunction prevents the publication of certain information.
However, unlike a regular injunction, it also prevents the media from reporting on the existence of the injunction itself.
Superinjunctions can only be granted by the high court, with applicants required to meet stringent legal tests of necessity, proportionality and the risk of serious harm.
They are most commonly used in cases involving breaches of privacy, confidential business information, or where there is a risk of significant reputational damage.
Why was superinjunction lifted?
An internal review into the affair was launched at the start of this year by Paul Rimmer, a retired civil servant.
It played down the risk to those whose data is included in the breached dataset should it fall into the hands of the Taliban.
The review said it was “unlikely to substantially change an individual’s existing exposure given the volume of data already available”.
It also concluded that “it appears unlikely that merely being on the dataset would be grounds for targeting” and it is “therefore also unlikely that family members… will be targeted simply because the ‘principal’ appears… in the dataset”.
This is why a High Court judge ruled that the superinjunction could be lifted.
Mr Malik, however, said that he believes there is still a risk to those named in the breach.
He added: “Our claimants continue to live with the fear of reprisal against them and their families, when they should have been met with gratitude and discretion for their service.
“We would expect substantial financial payments for each claimant in any future legal action. While this will not fully undo the harm they have been exposed to, it will enable them to move forward and rebuild their lives.”
Latest MoD data breach
While the MoD’s data breach is by far the largest involving Afghan nationals, it is not the first.
Earlier this month, the MoD said Afghans impacted by a separate mistake could claim up to £4,000 in compensation four years after the incident happened.
Human error resulted in the personal information of 265 Afghans who had worked alongside British troops being shared with hundreds of others who were on the same email distribution list in September 2021.
In December 2023, the UK Information Commissioner fined the MoD £350,000 and said the “egregious” breach could have been life-threatening.
Israel has shown little respect for international borders since becoming the unrivalled military hegemon of the Middle East. Today that meant an Israeli airstrike on a government building in Damascus.
Israel has moved into parts of the south of the country, built military bases and declared a line of control.
Image: Smoke rises from an Israeli airstrike that hit the Syrian Defence Ministry in Damascus. Pic: AP
On Monday, Syrian tanks heading south to try and restore order following an outbreak of factional fighting were attacked by Israeli warplanes.
“The presence of such vehicles in southern Syria could pose a threat to Israel,” stated the Israel Defence Forces.
In reality, Syria’s ageing tanks pose minimal threat to Israel’s state-of-the art military.
Please use Chrome browser for a more accessible video player
0:08
Syrian presenter interrupted by Israeli airstrike
The Syrian armour was attacked as it entered the area around Sweida in the Druze heartland of southern Syria following factional fighting there.
More on Israel
Related Topics:
The flare-up reportedly began with clashes between Bedouin and Druze groups that ended in scores killed.
The background to the escalation is complicated.
At least three Druze militia groups are divided in their loyalties to different religious leaders and differ over how they should respond to calls to assimilate into the new post-revolutionary Syria.
Image: Druze from Syria and Israel protest on the Israeli-Syrian border.
Pic: AP
Israel is becoming more and more involved in Syria’s internecine war and says it will remain there indefinitely “to protect our communities and thwart any threat”.
Its critics say Israel is operating a policy of divide and rule in Syria, weakening the fledgling government and creating a buffer zone to protect the border with the Golan Heights – originally Syrian territory that it has occupied and annexed for almost half a century.
Since the fall of the Assad regime, Israel has used airstrikes to destroy of much of Syria’s military capability weakening its ability to impose control on outlying regions. This makes it more not less likely Israel will have a volatile unstable state on its northern border.
Image: Syrian security forces walk along a street in the southern Druze city of Sweida. Pic: Reuters
America and European powers have chosen to normalise relations with the new government in Damascus and lift sanctions.
In contrast Israel has occupied its territory, bombed its military and today hit one of its government buildings in the capital with an airstrike.
Since its crushing military campaigns against Hamas, Hezbollah and Iran, Israel has emerged as the unchallenged military power of the region.
There is however a limit to what blunt force can achieve alone. It requires diplomacy to achieve lasting gains and Israel’s repeated assaults on multiple neighbours combined with its relentless campaign in Gaza are winning it few friends in the region.
Israeli airstrikes have targeted the Syrian military headquarters in Damascus amid renewed clashes in the country.
The gate of the Ministry of Defence in the Syrian capital was targeted by two warning missiles from an Israeli reconnaissance aircraft.
State-owned Elekhbariya TV said the Israeli strike had wounded two civilians, the Reuters news agency reported.
Image: Smoke rises from Syria’s defence ministry building in Damascus. Pic: Reuters
It came as Israeli airstrikes targeted security and army vehicles in the southern city of Sweida, where the Druze faith is one of the major religious groups – marking the third consecutive day Israel has struck Syrian forces.
The Israeli military confirmed it had “struck the entrance gate” in Damascus – and that it would be monitoring “actions being taken against Druze civilians in southern Syria”.
Image: The Israeli airstrike targeted Syria’s military headquarters. Pic: AP
Why Israel is getting involved in Syria’s internal fighting
Israel has shown little respect for international borders since becoming the unrivalled military hegemon of the Middle East. Today that meant an Israeli airstrike on a government building in Damascus.
Israel says its attack on a Syrian defence ministry facility was intended as a warning to the new government: stay out of the part of southern Syria we have occupied or else.
Israel has moved into parts of the south of the country, built military bases and declared a line of control.
On Monday, Syrian tanks heading south to try and restore order following an outbreak of factional fighting were attacked by Israeli warplanes.
“The presence of such vehicles in southern Syria could pose a threat to Israel,” stated the Israel Defence Forces.
In reality, Syria’s ageing tanks pose minimal threat to Israel’s state-of-the art military.
Local media said Sweida and nearby villages were coming under heavy artillery and mortar fire on Wednesday, according to Reuters.
The clashes marked the collapse of a ceasefire between Syrian government forces and Druze armed groups, with Israel also warning it would increase its involvement.
Image: Syria said its forces had responded to being fired upon. Pic: Reuters
Israel said it was acting to protect the Druze groups through its attacks on convoys of Syrian forces.
Syria blamed militias in Sweida for violating a ceasefire agreement which had only been reached on Tuesday.
A statement from its defence ministry said: “Military forces continue to respond to the source of fire inside the city of Sweida, while adhering to rules of engagement to protect residents, prevent harm, and ensure the safe return of those who left the city back to their homes.”
Israel’s defence minister Israel Katz said the military will continue to strike Syrian forces until they withdraw and should “leave Druze alone”, according to local reports.
At least 20 people have been killed in an incident in Khan Younis, according to the Gaza Humanitarian Foundation (GHF), an Israel and US-backed organisation.
In a statement, it said 19 people were trampled and one was stabbed in a surge “driven by agitators in the crowd”.
“We have credible reason to believe that elements within the crowd – armed and affiliated with Hamas – deliberately fomented the unrest,” it said.
“For the first time since operations began, GHF personnel identified multiple firearms in the crowd, one of which was confiscated. An American worker was also threatened with a firearm by a member of the crowd during the incident.”
It provided no evidence to support the claim.
The Hamas-run Gaza health ministry claimed 21 Palestinians were killed, “including 15 who died of suffocation as a result of tear gas fired at the starving people and the subsequent stampede” at the GHF site.
Please use Chrome browser for a more accessible video player
2:54
Gaza deaths increase when aid sites open
The statement is unusual for the GHF, as the controversial group, which has been rejected by the United Nations and other aid groups, rarely acknowledges trouble at its distribution sites.
The GHF began distributing food packages in Gaza at the end of May, after Israel eased its 11-week blockade of aid into the territory.
It has four distribution centres, three of which are in the southern Gaza Strip. The sites, kept off-limits to independent media, are guarded by private security contractors and located in zones where the Israeli military operates.
Analysis: Gazans face unbearable choice of risking their lives for supplies or going hungry
by Lisa Holland, Sky News correspondent in Jerusalem
The United Nations has already condemned the aid centres run by the Gaza Humanitarian Foundation as “death traps” – and that was before the latest loss of life, seemingly mostly from suffocation.
It’s the first and only time we know of people dying in this way, waiting to get food. Although the Gaza health ministry and the GHF dispute exactly what happened.
But how much longer can this Israeli and American-backed way to supply aid continue when people are dying on a near-daily basis?
However it happened, Gaza’s overcrowded hospitals are once again overwhelmed.
And there are serious questions to answer about the organisation of a system which is supposed to be providing humanitarian aid to desperately hungry people, but instead is a place where there is so much loss of life.
It leaves people with an unbearable choice between risking their lives to get supplies or going hungry.
Palestinian witnesses say Israeli forces have repeatedly opened fire towards crowds of people going to receive aid.
The Israeli military says it has fired warning shots at people who have behaved in what it says is a suspicious manner. It says its forces operate near the aid sites to stop supplies from falling into the hands of militants.
After the deaths of hundreds of Palestinians trying to reach the aid hubs, the UN has called the GHF’s aid model “inherently unsafe” and a violation of humanitarian impartiality standards.
In response, a GHF spokesperson said: “The fact is the most deadly attacks on aid sites have been linked to UN convoys.”
Image: People carry distributed aid supplies in Khan Yunis, southern Gaza. File pic: AP
The GHF says it has delivered more than 70 million meals to Gazans in five weeks and claims other humanitarian groups – which refuse to work with the GHF – had “nearly all of their aid looted” by Hamas or criminal gangs.
Since the GHF sites began operating, more than 875 people have been killed while receiving aid, both at GHF distribution points or elsewhere, according to the UN human rights office and the Hamas-run Gaza health ministry.
At least 674 of those have been killed in the vicinity of aid distribution sites run by the GHF.