On September 3, 2025, the UK Parliament’s Defence Committee launched a sweeping inquiry into the Ministry of Defence’s (MOD) handling of a major data breach and the subsequent resettlement of thousands of Afghans, a saga that has shaken public trust and prompted urgent questions about government transparency, accountability, and the true costs of national security failures. The inquiry follows a cascade of revelations, official apologies, and watchdog reports, all of which have exposed the scale and complexity of one of Britain’s most consequential security lapses in recent memory.
The story begins in early 2022, when an MOD official accidentally sent the personal details of approximately 18,700 Afghan applicants for UK resettlement to an external party. According to the National Audit Office (NAO), this data—containing sensitive information about Afghans who had worked alongside British forces and were now at risk of Taliban reprisals—was later published on Facebook in 2023. The breach not only endangered the lives of those named, but also included details of lawmakers and senior military figures who had advocated on behalf of Afghan allies, as Defence Secretary John Healey acknowledged in July 2025.
In the immediate aftermath, the government scrambled to contain the fallout. A court-imposed superinjunction, granted by the High Court in September 2023, prevented the media and public from learning about the breach or the government’s response. This legal tool, rarely used in matters of such broad public interest, kept a lid on debate and scrutiny for nearly two years. The secrecy, intended to protect those at risk, raised its own set of ethical and procedural questions—ones now at the heart of the Defence Committee’s inquiry.
The government’s response was both swift and secretive. In 2024-2025, officials covertly relocated thousands of Afghans to the UK, including individuals whose initial applications for resettlement had been rejected. The Afghanistan Response Route (ARR) was quietly launched in April 2024 as a direct response to the breach, designed to bring endangered Afghans to safety. The scheme’s existence and costs were deliberately hidden within the MOD’s broader resettlement spending, a move the MOD later explained as necessary to maintain secrecy while the injunction was in force. Only in July 2025, after the High Court lifted the superinjunction, did the full extent of the crisis and the government’s efforts become public knowledge.
Yet the financial and human costs of this operation remain murky. The NAO, in a report released on September 2, 2025, stated bluntly that the MOD could not accurately calculate how much it had spent on the ARR, casting doubt on the government’s current estimate of £850 million. The NAO found that the MOD did not separately account for the costs of the ARR, meaning the true figure could be significantly higher, especially when factoring in potential compensation claims and legal fees. “At the time of publication, the MoD had not provided us with sufficient evidence to give us confidence regarding the completeness and accuracy of these estimates,” the report stated, as cited by Reuters.
The MOD’s own estimates suggest the government-wide cost per resettled individual is £128,000, with £53,000 of that met by the MOD. Between 2021 and 2029, the total cost of all Afghan resettlement activities is forecast to exceed £2 billion—a staggering sum that has prompted questions about opportunity costs and the impact on other public services. An MOD spokesperson told Forces.net, “We are committed to honouring the moral obligation we owe to those Afghans who stood with us and risked their lives. Since taking the decision to support the lifting of the super-injunction brought by the previous government, we have been clear on the costs associated with relocating eligible Afghans to the UK – and are fully committed to transparency.”
The NAO report also revealed that the number of people ultimately resettled could be almost 4,000 higher than initially projected, as the MOD is reviewing previously rejected applications, including from members of the elite Afghan special forces unit known as the “Triples.” In total, up to 27,278 people—those relocated under the ARR or other resettlement programs—were affected by the data leak, according to the NAO.
The Defence Committee’s inquiry, announced by chair Tan Dhesi MP, aims to shine a light on every facet of this episode: from the use of the superinjunction and the government’s risk management to the planning and delivery of resettlement decisions. Dhesi was candid in his assessment, stating, “We were all shocked by the Government’s revelation in July that hundreds of millions of pounds of taxpayers’ money had been secretly committed to bringing to safety thousands of Afghans whose lives were jeopardised by a colossal data breach from the Ministry of Defence.” He emphasized the need for public scrutiny, adding, “We will be taking as much evidence as possible in public and on camera, to shine a light on events kept secret for nearly two years.”
Among the many questions the inquiry will tackle are whether the government was justified in seeking and maintaining the injunction, whether its actions under the cloak of secrecy were timely and effective, and what systemic or cultural failures allowed such a breach to occur in the first place. The Committee is also seeking evidence on the adequacy of the resettlement arrangements, the impact on public trust, and the broader consequences for defence, public services, and local communities.
For many affected Afghans, the stakes could not be higher. The data breach exposed them and their families to potential Taliban reprisals, a risk that the government sought to mitigate through urgent resettlement. But for those who remain outside the UK, the danger persists, and the inquiry will examine how the government is managing ongoing risks to individuals whose data was compromised but who have not been relocated.
Meanwhile, the Public Accounts Committee is set to question senior MOD officials on September 8, 2025, specifically regarding the costs and management of the Afghan data breach. With the deadline for written evidence to the Defence Committee set for October 14, 2025, stakeholders across government, civil society, and the Afghan diaspora are being urged to contribute their insights and experiences.
As the inquiry unfolds, it promises to test the government’s commitment to transparency and accountability—values that, as recent events have shown, are sometimes at odds with the imperatives of national security. The outcome will likely shape not only the fate of those affected by the breach, but also the standards by which future crises are judged and managed.
The UK’s handling of the Afghan data breach and resettlement crisis stands as a stark reminder of the profound human and financial costs that can arise when sensitive information falls into the wrong hands—and the difficult trade-offs governments face in balancing secrecy, security, and public accountability.