UK Faces Fallout From Largest Afghan Data Breach Exposing 18,700 Applicants

A significant data breach occurred in 2022 when a British Ministry of Defence official accidentally emailed a spreadsheet containing personal details of nearly 19,000 Afghans who applied under the Afghan Relocations and Assistance Policy (Arap), exposing them to Taliban reprisals. The breach also compromised information related to over 100 British personnel, including special forces and intelligence officers, raising concerns about long-term security risks, as warned by veterans familiar with Afghanistan operations. The UK government kept the breach secret for nearly two years using an unprecedented superinjunction, only lifting it recently, which has drawn criticism over transparency and accountability. The government has since relocated thousands of affected Afghans to the UK and promised to honor invitations for those still in Afghanistan, while the cost of the operation is estimated at £850 million. Those affected have expressed anxiety and fear for their safety, with some noting increased risks and hardships following the leak. The Defence Secretary has issued a formal apology, and a compensation scheme for victims is being considered amid calls for stronger protections and recognition of the human cost involved.