MoD data breach affects Afghan resettlement records

Personal data of up to 3,700 Afghans resettled in the UK may have been exposed in a MoD subcontractor incident.

MoD data breach harms Afghan resettlement records

Afghans resettled in the UK are affected by a data breach linked to Inflite The Jet Centre, a sub-contractor working with the MoD. The incident potentially exposed names, dates of birth, passport numbers and ARAP references of up to 3,700 Afghans who traveled to the UK between January and March 2024. The firm says the scope was limited to email accounts and has reported the breach to the Information Commissioner’s Office. The government notes there is no current threat to individuals’ safety or to government systems.

The case follows a 2022 breach that affected nearly 19,000 Afghan applicants under the ARAP scheme, which prompted relocations and renewed scrutiny of data handling. Officials emphasise checks and steps taken to notify those affected and to protect other data flows, but critics say the repeated incidents reveal deeper weaknesses in how data is managed across private contractors.

The breach shines a light on the gaps in a relocation process that relies on private partners and complex records. When sensitive information travels through third parties, the risk of exposure rises and trust can falter. This is not only a data issue but a policy test: how quickly the system can protect vulnerable people without compromising privacy and due process. Policymakers must balance urgency with strong oversight, clear accountability, and transparent updates to those waiting for relocation. The episode also intensifies scrutiny of how the government communicates risk and safety to families already living under threat.

Highlights

Trust in the process will hinge on concrete changes, not promises.