Britain suspects China is behind a cyber attack on military personnel’s data

Unlock Editor’s Digest for free

Roula Khalaf, editor of the FT, picks her favorite stories in this weekly newsletter.

The British government suspects China is behind a cyberattack targeting the names and banking details of up to 270,000 current and former British military personnel, according to a person with direct knowledge of the matter.

The hack, which accessed a UK Ministry of Defense contractor’s IT system that was not connected to the MoD’s central network, was discovered in recent days.

Hackers accessed a system that contained the names and banking information of all active military personnel and reservists, as well as several thousand veterans. A small number of addresses were also in the system.

An initial Defense Department investigation found that while a system breach had occurred, there was no evidence that personal data had been copied or “removed” from it. However, precautionary measures are taken in the event that personal data is copied.

SSCL is the contractor that manages the payroll of the Defense Department’s military personnel, according to a person briefed on the matter. Sopra Steria, owner of SSCL, has been contacted for comment.

Cabinet minister Mel Stride confirmed on Tuesday that a cyberattack had taken place against a third-party payroll system used by the Defense Ministry, telling Sky News, which first reported the hack, that it was a “very significant matter.” He said the department acted “very quickly” and took the system offline.

Stride declined to comment on whether the UK had identified China as the hostile actor behind the hack, saying: “That’s an assumption. We’re not saying that at this stage.”

The British government sees the regime in Beijing as an “epochal challenge,” he said, adding that “our eyes are wide open when it comes to China.”

Grant Shapps, Defense Secretary, will make a statement to MPs about the hack later on Tuesday. He is expected to confirm suggestions that an enemy state was responsible, but the British government is not expected to publicly name China.

However, a person with direct knowledge of the hack said the British government suspected Beijing was behind the cyberattack.

John Healey, Labour’s shadow defense secretary, called it quits

Tory MP Tobias Ellwood, a former defense secretary, told the BBC: “Targeting the names of the payroll system and the banking details of military personnel points to China because it may be part of a plan, one Strategy to find out who it could be.” forced.”

The Cabinet Office, the department that runs the machinery of government, intelligence agencies and private security specialists, was brought in to help with the Defense Department’s investigation.

In addition, a private security company has been hired to monitor the Internet in case information is successfully removed from the contractor’s IT system and leaks onto the Internet.

Monthly salary payments to military personnel remain unaffected. The personal data of British special forces personnel is stored in a different IT system and is not affected.

Members of the Armed Forces will be informed of the cyber attack on Tuesday as the Defense Ministry seeks to reassure those potentially affected that their safety is not at risk.

The Defense Ministry will offer counseling and social assistance and set up a call center to handle questions.

This comes after the US and Britain announced sweeping measures in March against hackers backed by the Chinese government, claiming they had carried out large-scale cyberattacks against targets in Washington and London.

Lin Jian, a Chinese Foreign Ministry spokesman, said on Tuesday: “The comments from British politicians are completely absurd. China consistently rejects and combats all forms of cyber attacks and firmly opposes intentionally vilifying other countries for political purposes by exploiting cyber security issues.”

A Ministry of Defense spokesman said on Tuesday: “The Defense Secretary will make a planned statement to the House of Commons this afternoon setting out the multi-point plan to support and protect personnel.”