A parliamentary investigation has determined that a massive data leak, which compromised the sensitive information of thousands of Afghans seeking refuge in the UK, was a preventable failure. The Commons Defence Committee released a report on Thursday highlighting that the Ministry of Defence (MoD) lacked the necessary skills to manage the Afghan relocation program following the Taliban’s takeover of Kabul. Furthermore, the report argues that the department utilized secrecy as a mechanism to avoid public oversight.
Although the incident occurred in August 2023, a rigorous super-injunction suppressed public reporting on the matter until July 2025. The committee emphasized that the breach resulted from systemic weaknesses, such as inadequate training, flawed operational procedures, and a poor culture regarding data security, rather than just an isolated human error. The leak involved a Microsoft Excel file containing details for over 18,500 applicants to the Afghan Relocations and Assistance Policy (Arap) scheme, which were shared with an external party by MoD personnel.
Committee chairman Tan Dhesi criticized the MoD for handling immigration casework, asserting that their focus should remain on defense. He also challenged the government’s tendency to hide behind a policy of not commenting on special forces activities, noting that this practice hindered accountability. The report follows revelations that British Special Forces had previously rejected nearly 1,600 resettlement applications without approvals, many of which were later overturned following an official government review. While the Ministry of Defence stated that the incident was unacceptable and claimed that new reforms have been implemented to enhance data protection, many affected individuals remain in dangerous conditions while awaiting legal resolution.
