Almost 7,000 Afghan nationals are being relocated to the UK following a massive data breach by the British military that successive governments tried to keep secret with a superinjunction.
The blunder exposed the personal information of close to 20,000 individuals, endangering them and their families – with as many as 100,000 people impacted in total.
The UK only informed everyone on Tuesday – three-and-a-half years after their data was compromised.
The Ministry of Defence (MoD) said the relocation costs alone directly linked to the data breach will be around £850m. An internal government document from February this year said the cost could rise to £7bn, but an MoD spokesperson said that this was an outdated figure.
However, the total cost to the taxpayer of existing schemes to assist Afghans who are deemed eligible for British support, as well as the additional cost from the breach, will come to at least £6bn.
In addition, litigation against the UK arising from the mistake could add additional cost, as well as whatever the government has already spent on the superinjunction.
Details about the blunder can finally be made public after a judge lifted the injunction that had been sought by the government.
Please use Chrome browser for a more accessible video player
2:46
Defence secretary on Afghan leak
Barings Law, a law firm that is representing around 1,000 of the victims, accused the government of trying to hide the truth from the public following a lengthy legal battle.
Defence Secretary John Healey offered a “sincere apology” for the data breach in a statement to MPs in the House of Commons on Tuesday afternoon.
He said he had felt “deeply concerned about the lack of transparency” around the data breach, adding: “No government wishes to withhold information from the British public, from parliamentarians or the press in this manner.”
The previous Conservative government set up a secret scheme in 2023 – which can only now be revealed – to relocate Afghan nationals impacted by the data breach but who were not eligible for an existing programme to relocate and assist individuals who had worked for the British government in Afghanistan.
Some 6,900 Afghans – comprising 1,500 people named on the list as well as their dependents – are being relocated to the UK as part of this programme.
Image: Afghan co-workers and their families board a plane during the Kabul airlift in August 2021. Pic: South Korean Defense Ministry/ZUMA Press Wire/Shutterstock
This comes on top of the many thousands more who are being moved until the Afghan Relocation and Assistance Policy (ARAP). A lot of these individuals are also caught up in the data breach.
The Times, which has been battling the injunction, said a total of 18,500 people have so far been relocated to the UK, including those directly impacted plus their dependents.
Spotify
This content is provided by Spotify, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spotify cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spotify cookies.
To view this content you can use the button below to allow Spotify cookies for this session only.
Some 5,400 more Afghans who have already received invitation letters will be flown to the UK in the coming weeks, bringing the total number of Afghans affected by the breach being brought to the UK to 23,900. The rest of the affected Afghans will be left behind, the newspaper reported.
How did the data breach happen?
The disaster is thought to have been triggered by the careless handling of an email that contained a list of the names and other details of 18,714 Afghan nationals. They had been trying to apply to a British government scheme to support those who helped or worked with UK forces in Afghanistan that were fighting the Taliban between 2001 and 2021.
Image: People gathered desperately near evacuation control checkpoints during the crisis. Pic: AP
Image: The evacuation at Kabul airport was chaotic. Pic: AP
The collapse of the western-backed Afghan government that year saw the Taliban return to power. The new government regards anyone who worked with British or other foreign forces during the previous two decades as a traitor.
A source said a small number of people named on the list are known to have subsequently been killed, though it is not clear if this was a direct result of the data breach.
It is also not clear whether the Taliban has the list – only that the MoD lost control of the information.
Image: Taliban members on the second anniversary of the fall of Kabul. Pic: Reuters
Adnan Malik, head of data protection at Barings Law, said: “This is an incredibly serious data breach, which the Ministry of Defence has repeatedly tried to hide from the British public.
“It involved the loss of personal and identifying information about Afghan nationals who have helped British forces to defeat terrorism and support security and stability in the region.
“A total of around 20,000 individuals have been affected, putting them and their loved ones at serious risk of violence from opponents and armed groups.”
The law firm is working with around 1,000 of those impacted “to pursue potential legal action”.
It is thought that only a minority of the names on the list – about 10 to 15% – would have been eligible for help under the Afghan Relocation and Assistance Policy (ARAP).
The breach occurred in February 2022, when Boris Johnson was prime minister, but was only discovered by the British military in August 2023.
A superinjunction – preventing the reporting of the mistake – was imposed in September of that year.
It meant the extraordinary – and costly – plan to transport thousands of Afghans to the UK took place in secret until now.
Sir Keir Starmer’s government inherited the scandal.
What is a superinjunction?
In UK law, a superinjunction prevents the publication of certain information.
However, unlike a regular injunction, it also prevents the media from reporting on the existence of the injunction itself.
Superinjunctions can only be granted by the high court, with applicants required to meet stringent legal tests of necessity, proportionality and the risk of serious harm.
They are most commonly used in cases involving breaches of privacy, confidential business information, or where there is a risk of significant reputational damage.
Why was superinjunction lifted?
An internal review into the affair was launched at the start of this year by Paul Rimmer, a retired civil servant.
It played down the risk to those whose data is included in the breached dataset should it fall into the hands of the Taliban.
The review said it was “unlikely to substantially change an individual’s existing exposure given the volume of data already available”.
It also concluded that “it appears unlikely that merely being on the dataset would be grounds for targeting” and it is “therefore also unlikely that family members… will be targeted simply because the ‘principal’ appears… in the dataset”.
This is why a High Court judge ruled that the superinjunction could be lifted.
Mr Malik, however, said that he believes there is still a risk to those named in the breach.
He added: “Our claimants continue to live with the fear of reprisal against them and their families, when they should have been met with gratitude and discretion for their service.
“We would expect substantial financial payments for each claimant in any future legal action. While this will not fully undo the harm they have been exposed to, it will enable them to move forward and rebuild their lives.”
Latest MoD data breach
While the MoD’s data breach is by far the largest involving Afghan nationals, it is not the first.
Earlier this month, the MoD said Afghans impacted by a separate mistake could claim up to £4,000 in compensation four years after the incident happened.
Human error resulted in the personal information of 265 Afghans who had worked alongside British troops being shared with hundreds of others who were on the same email distribution list in September 2021.
In December 2023, the UK Information Commissioner fined the MoD £350,000 and said the “egregious” breach could have been life-threatening.
At least 12 people have been killed in a suicide bombing outside the gates of a court in Pakistan’s capital of Islamabad, the country’s interior minister has said.
At least 27 other people were also wounded after the bomber detonated his explosives next to a police car.
Interior minister Mohsin Naqvi said the attacker tried to “enter the court premises but, failing to do so, targeted a police vehicle”.
Mr Naqvi added that authorities are “looking into all aspects” of the attack.
Image: Pic: Reuters
Image: Pic: AP
No group immediately claimed responsibility for the explosion, but authorities have recently struggled with a resurgent Pakistani Taliban.
The explosion, which was heard from miles away, occurred at a busy time of day when the area outside the court is typically crowded with hundreds of visitors attending hearings.
More than a dozen badly wounded people were screaming for help as ambulances rushed to the scene.
More on Pakistan
Related Topics:
“People started running in all directions,” said Mohammad Afzal, who claimed he was at the court when he heard the blast.
Image: Pic: Reuters
Image: Pic: AP
Pakistani security forces earlier said they foiled an attempt by militants to take cadets hostage at an army-run college overnight, when a suicide car bomber and five other attackers targeted the facility in a northwestern province.
The authorities blamed the Pakistani Taliban, which is separate from but allied with Afghanistan’s Taliban, but the group denied involvement in that attack on Monday evening.
The assault began when a bomber attempted to storm the cadet college in Wana, a city in Khyber Pakhtunkhwa province near the Afghan border.
The area had, until recent years, served as a base for the Pakistani Taliban, al Qaeda and other foreign militants.
According to local police chief Alamgir Mahsud, two of the militants were quickly killed by troops while three others managed to enter the compound before being cornered in an administrative block.
The army’s commandos were among the forces conducting a clearance operation, and an intermittent exchange of fire went on into Tuesday, Mr Mahsud said.
Pakistani Prime Minister Shehbaz Sharif denounced both attacks and said those responsible must be brought to justice swiftly.
“We will ensure the perpetrators are apprehended and held accountable,” he said.
Mr Sharif described attacks on unarmed civilians as “reprehensible”, adding: “We will not allow the blood of innocent Pakistanis to go to waste.”
At least eight people have been killed and at least 19 others injured after a car exploded in New Delhi, say Indian police.
The blast, which triggered a fire that damaged several vehicles parked nearby, happened at the gates of the metro station at the Red Fort, a former Mughal palace and a busy tourist spot.
New Delhi’s international airport, metro stations and government buildings were put on a high security alert after the explosion, the government said. The cause of the explosion is being investigated.
The city’s police commissioner, Satish Golcha, said it happened a few minutes before 7pm.
“A slow-moving vehicle stopped at a red light. An explosion happened in that vehicle, and due to the explosion, nearby vehicles were also damaged,” he told reporters.
Please use Chrome browser for a more accessible video player
0:29
Local media said at least 11 people were injured and that Mumbai and Uttar Pradesh state had been put on high alert after the incident
Image: Police officers and forensic technicians work at the site of the explosion. Pic: Reuters
Image: The site of the explosion. Pic: Reuters
One resident, who did not give a name, told NDTV: “We heard a big sound, our windows shook.”
Sanjay Tyagi, a Delhi police spokesman, said they were still investigating the cause, while the fire service reported that at least six vehicles and three autorickshaws had caught fire.
Images show the burnt-out remnants of several cars and forensic officers at the scene.
Image: The scene has now been sealed off. Pic: Reuters
Home minister Amit Shah told local media that a Hyundai i20 car exploded near a traffic signal close to the Red Fort. He said CCTV footage from cameras in the area will form part of the investigation.
“We are exploring all possibilities and will conduct a thorough investigation, taking all possibilities into account,” Shah said. “All options will be investigated immediately, and we will present the results to the public.”
The investigation is being conducted by the National Investigation Agency, India’s federal terror investigating agency, and other agencies.
India’s Prime Minister Narendra Modi offered his condolences to those who have lost their loved ones in the blast.
He posted on X: “May the injured recover at the earliest. Those affected are being assisted by authorities.
“Reviewed the situation with Home Minister Amit Shah Ji and other officials.”
This breaking news story is being updated and more details will be published shortly.
It is a moment few could have imagined just a few years ago but the Syrian president, Ahmed al Sharaa, has arrived in Washington for a landmark series of meetings, which will culminate in a face-to-face with Donald Trump at the White House.
His journey to this point is a remarkable story, and it’s a tale of how one man went from being a jihadist battlefield commander to a statesman on the global stage – now being welcomed by the world’s most powerful nation.
Before that he went by the nom de guerre Abu Mohammed al Jolani.
During Syria’s brutal civil war, he was the leader of the Nusra Front – a designated terror organisation, the Syrian branch of al Qaeda.
Back then, the thought of him setting foot on US soil and meeting a US president would have been unthinkable. There was a $10m reward for information leading to his capture.
Image: Ahmed al Sharaa meeting Donald Trump in Riyadh in May. Pic: AP
So what is going on? Why is diplomacy being turned on its head?
After 14 years of conflict which started during the so-called Arab Spring, Syria is in a mess.
Mr Sharaa – as the head of the transitional government – is seen by the US as having the greatest chance of holding the country together and stopping it from falling back into civil war and failed state territory.
But to do that, Syria has to emerge from its pariah status and that’s what the US is gambling on and why it’s inclined to offer its support and a warm embrace.
Image: Donald Trump, Crown Prince Mohammed Bin Salman and Ahmed al Sharaa in May. Pic: Saudi Press Agency
By endorsing Mr Sharaa, it is hoping he will shed his past and emerge as a leader for everyone and unite the country.
Holding him close also means it’s less likely that Iran and Russia will again be able to gain a strong strategic foothold in the country.
So, a man who was once an enemy of the US is now being feted as a potential ally.
Image: Mr Sharaa meeting Vladimir Putin in Moscow in October. Pic: Reuters
There are big questions, though. He has rejected his extremist background, saying he did what he did because of the circumstances of the civil war.
But since he took power, there have been sectarian clashes. In July, fighting broke out between Druze armed groups and Bedouin tribal fighters in Sweida.
It was a sign of just how fragile the country remains and also raises concerns about his ability to be a leader for everyone.
Please use Chrome browser for a more accessible video player
Nonetheless, Mr Sharaa is viewed as the best chance of stabilising Syria and by extension an important part of the Middle East.
Get Syria right, the logic goes, and the rest of the jigsaw will be easier to put and hold together.
The visit to Washington is highly significant and historic. It’s the first-ever official visit by a Syrian head of state since the country’s independence in 1946.
Please use Chrome browser for a more accessible video player
0:20
Top shot: Syrian leader shows off his basketball skills
The meeting with Donald Trump is, though, the really big deal. The two men met in Riyadh in May but in the meeting later today they will discuss lifting sanctions – crucial to Syria’s post-war reconstruction – how Syria can help in the fight against Islamic State, and a possible pathway to normalisation of relations with Israel.
The optics will be fascinating as the US continues to engage with a former militant with jihadi links.
It’s a risk, but if successful, it could reshape Syria’s role in the region from US enemy to strong regional ally.