Connect with us

Hi, what are you looking for?

Tech & Science

UK defence ministry fined for Afghan data breach

The UK defence ministry has been fined £350,000 ($440,000) for disclosing information of 265 Afghans seeking to flee the Taliban.

The UK's evacuation plan after the Taliban takeover of Aghanistan has been widely criticised
The UK's evacuation plan after the Taliban takeover of Aghanistan has been widely criticised - Copyright AFP Yuki IWAMURA
The UK's evacuation plan after the Taliban takeover of Aghanistan has been widely criticised - Copyright AFP Yuki IWAMURA

The UK defence ministry has been fined £350,000 ($440,000) for disclosing personal information of 265 Afghans seeking to flee the Taliban, a data watchdog announced on Wednesday.

“This deeply regrettable data breach let down those to whom our country owes so much,” said UK data commissioner John Edwards.

The error saw the email addresses of hundreds of people, including Afghan interpreters potentially eligible for relocation to Britain, openly included in the “to” field, rather than blind copied.

It first came to light in September 2021, soon after the Taliban takeover of Afghanistan, and the chaotic efforts to evacuate vulnerable people from the country.

Ben Wallace, who was defence minister at the time, apologised and disclosed that one official had been suspended.

Britain’s Afghanistan evacuation plan has been widely criticised, with the government accused by MPs of “systemic failures of leadership, planning and preparation”.

Hundreds of Afghans eligible for relocation were left behind, many with their lives potentially at risk after details of staff and job applicants were left at the abandoned British embassy in Kabul.

In his ruling, Edwards said “very challenging” conditions on the ground and fast-paced decision-making were no excuse for not protecting personal information.

Those affected “were vulnerable to reprisal and at risk of serious harm,” he added. “When the level of risk and harm to people heightens, so must the response.”

A total of 245 people had their details inadvertently disclosed, 55 of whom had thumbnail pictures on their email profiles.

Two people “replied all” to all recipients and one included their location, Edwards’ office said.

“The data disclosed, should it have fallen into the hands of the Taliban, could have resulted in a threat to life,” it added in a statement.

Recipients were told to delete the email, change their email address and tell the team in charge of relocations of their new details via a secure form.

Two other data breaches were discovered during the investigation. A total of 265 people were affected in all three incidents.

In response, the Ministry of Defence acknowledged the seriousness of the breach and said it had overhauled its procedures.

The ICO said it reduced the fine from £1,000,000 to £700,000 because of the MoD’s immediate response to the error, then cut it further as it is a public body.

AFP
Written By

With 2,400 staff representing 100 different nationalities, AFP covers the world as a leading global news agency. AFP provides fast, comprehensive and verified coverage of the issues affecting our daily lives.

You may also like:

Entertainment

Liam Hemsworth as Owen Brophy in 'Lonely Planet.' Photo Credit: Hilary Bronwyn Gayle, Netflix.Australian actor Liam Hemsworth stars in the new movie “Lonely Planet”...

Business

The European Central Bank is expected to lower interest rates again this week.

Business

Many professionals do not realise that just by working in certain industries, their personal data—emails, passwords, financial details—can be compromised.

Business

The analysis found the U.S. to be the best country for AI startups, boasting the largest total private investment ($335.2 billion).