KABUL (Pajhwok): The UK House of Commons Defence Committee has concluded that the exposure of the personal data of around 25,000 Afghans who applied for resettlement in the United Kingdom resulted from a “systemic and foreseeable failure” by the Ministry of Defence (MoD).
The committee found that the MoD failed to adequately safeguard sensitive information, ensure accountability, and effectively manage the fallout from the breach.
According to the Financial Times, the committee’s report says that in February 2022, a British soldier accidentally emailed an Excel spreadsheet containing the personal details of approximately 25,000 Afghan applicants for relocation to the UK to an individual outside the government.
The leaked data included information on Afghans who had worked with the British government before the Islamic Emirate of Afghanistan returned to power, exposing them to an increased risk of retaliation.
The committee said officials initially believed the spreadsheet contained information on only about 150 people. However, it was later discovered that it also held the confidential details of an additional 18,500 applicants.
The report criticizes the MoD for relying on large Excel spreadsheets to store highly sensitive personal information without adequately addressing the security risks associated with such files.
It concludes that the breach “was the product of a system that lacked the tools, controls, training, and assurance mechanisms appropriate to the sensitivity of the information.”
The report also notes that the unit responsible for the Afghan relocation programme recorded 18 further personal data security breaches during the 21 months following the incident.
The Defence Committee also criticized the secrecy surrounding the case. It said that after the breach was identified in August 2023, a court order barred the media from reporting on the incident for nearly two years. The restriction was lifted in July 2025.
According to the committee, the order prevented Parliament and the media from properly scrutinizing the government’s handling of the crisis.
The report states: “Excessive secrecy persisted, accountability was weak, the response was poorly coordinated, and many affected Afghans were left without the information and support they needed.”
The committee also warned future governments against using such court orders to conceal matters of significant public interest.
The report says around 1,000 victims of the data breach have launched legal action against the Ministry of Defence, while the relocation of affected Afghans remains ongoing.
In response, the Ministry of Defence said it has strengthened its data protection measures and remains committed to completing the Afghan resettlement programme before the end of the current parliamentary term.
sa
