Data on 225,000 British military personnel leaked
- Cyberpeace Tech
- Jul 17
- 2 min read
A serious security breach has exposed the personal data of more than 225,000 British military personnel. The incident, which affected the UK Army, Royal Air Force, and Navy, originated in a payroll system operated by an external company.
According to reports, the attackers accessed names, bank accounts, and other sensitive data, including personal addresses in some cases. The leak affects not only active personnel but also ex-military personnel and reservists.
Data leaks: the risk of external providers
The compromised system belongs to a provider contracted by the British Ministry of Defense. Although the name of the company was not officially mentioned, British media outlets have identified it as Shared Services Connected. This firm is responsible for processing military personnel payroll, including records from several years ago.
Grant Shapps, UK Secretary of State for Defense, stated that the attack came from a “malicious actor,” possibly backed by a nation-state.
Although no one has been directly blamed, official sources have pointed to China as the main suspect. The Chinese government has rejected these accusations, calling them unfounded.
Shapps also publicly criticized the contractor for failing to adequately protect its systems and announced a complete review of its operations and contracts.
Reflection for Mexico and Latin America
This case highlights the dangers of delegating critical functions (such as payroll management or sensitive data storage) to third parties without proper security controls. In Mexico, many public and private institutions rely on external providers for their processes.
This situation should serve as a warning to strengthen cybersecurity policies and demand strict data protection protocols.
At Cyberpeace, we insist on the importance of monitoring not only internal security, but also that of all external providers that handle critical information. Being informed, anticipating risks, and acting in a timely manner can make all the difference. Follow us on social media and stay up to date on everything you need to know about cybersecurity.
Comments