The UK government has finally admitted that the Ministry of Defence (MoD) made one of the most damaging data breaches in recent history. Nearly 19,000 Afghans who supported British forces had their personal details exposed, leaving them and their families at risk of Taliban reprisals.
Three years later, the full story is only now coming to light. Here’s what happened, why it matters, and what’s being done (or not done) to put things right.
What happened in the MOD Afghan data breach?
In February 2022, a MoD official mistakenly sent an email containing the names and contact details of Afghans applying to move to the UK under a relocation programme for those who worked with British forces.
The breach included details of interpreters, soldiers, and even special forces operatives, along with some family members.
The error wasn’t made public at the time. Instead, the leak came to light in August 2023 when parts of the data appeared on Facebook. The government applied for an injunction, later converted into a super-injunction, preventing any reporting of the breach.
Only in July 2025, over three years later, was the super-injunction lifted, allowing the press to report the full story.
Could lives have been lost?
Defence Secretary John Healey has admitted he is unable to say for sure whether anyone was killed because of the breach. While the MoD claims it is highly unlikely the risk of Taliban targeting has increased, families in Afghanistan feel differently.
One woman whose father’s details were leaked told the media her family “panicked” when they learned about the breach, fearing Taliban retaliation. Her grandmother, still in Afghanistan, remains “completely vulnerable”.
A costly and secretive response
The government’s reaction to data breach has raised concerns:
- A super-injunction kept the story under wraps for years.
- A secret resettlement programme was set up, costing £400 million so far, with a projected total cost of £850 million.
- Despite these efforts, 600 Afghan soldiers and 1,800 family members remain in Afghanistan, according to MoD figures.
Accountability, or lack of it
When sensitive data falls into the wrong hands, the damage can’t always be undone. And when the government chooses secrecy over transparency, the fallout is even harder to repair.
A security committee has launched an inquiry into Afghan data leak and the MoD has issued an apology and sent guidance to those affected, urging them to “exercise caution”. However, no compensation has been offered to victims, and the MoD says it will “robustly defend” any legal action.
We are monitoring the situation closely. Register your interest and we’ll keep you updated if one of our regulated UK partner law firms is able to take this claim forward.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
