Afghan data breach: What we do and do not know

Afghan data breach: What we do and do not know

A recent scandal involving a major data breach has captured the attention of the public, shedding light on a covert operation to relocate thousands of Afghans to the UK. The breach, which occurred in early 2022, revealed a spreadsheet containing the personal information of nearly 19,000 individuals seeking refuge from the Taliban. The leaked document included names, contact details, and family information of those who believed they were at risk due to their association with British forces during the Afghanistan war.

Initially kept under wraps, the data breach came to light in August 2023 when the names of applicants appeared on social media. It was later revealed that an Afghan national, rejected for relocation, had shared the information on Facebook. Fearing the Taliban’s access to the leaked document, the government sought a court injunction to prevent further dissemination of the information.

In the aftermath of the breach, a covert Afghanistan Response Route (ARR) was established in April 2024 to provide a means of escape for those impacted by the leak. By May 2024, it was estimated that around 20,000 individuals could be eligible for relocation under the new scheme. Defense Secretary John Healey confirmed that approximately 900 individuals had already arrived in the UK, with more offers pending.

While the financial cost of the relocation effort has reached £400 million, with a projected total expenditure of £450 million, concerns remain about the implications of the leak. Although the Ministry of Defense has been reticent about any potential harm resulting from the breach, a review conducted in early 2025 suggested that the leaked information may not have been as widely disseminated as feared. Despite this, those affected by the breach continue to fear for their safety and that of their families

Read the full article from The BBC here: Read More