- K3 Scout drones have been in service with the Royal Marines since March.
- During a routine cyber assessment, analysts found camera systems establishing outbound connections to a server in China.
- The MoD cut the cameras' internet access to prevent further communication with the external server.
- The MoD stated that an investigation found no evidence that its data or systems had been accessed, compromised or transmitted outside the UK.
- The MoD is conducting a wider review of components used in military equipment to identify any other systems that may have unauthorised internet connectivity.
- The £12 million drone fleet was supplied by British defence company Kraken Technology Group.
- The company sourced the optical equipment from a third-party supplier, which had reportedly provided assurances about the security of the components.
- This incident has rekindled questions about how thoroughly commercially available components are vetted before being incorporated into military systems.
- Security experts have warned that even basic metadata could potentially reveal information such as the location of equipment, operational schedules and when a device is activated.
- The planned use of the drones in the Persian Gulf makes the security discovery particularly significant, given the region’s strategic importance.
UK military drones, specifically the K3 Scout drones operated by the Royal Marines, were found sending data to a server in China during a routine cyber assessment. The £12 million fleet's camera systems were transmitting automated heartbeat communications, raising significant security concerns.123
The Ministry of Defence (MoD) responded by cutting the drones' internet access to prevent further unauthorized connections. Although the MoD stated that there was no evidence of data being compromised or transmitted outside the UK, security experts warn that even basic metadata could expose sensitive information, including location and operational schedules.11
The incident has reignited discussions about the vetting process for commercially available components used in military systems. The K3 Scout drones, supplied by Kraken Technology Group, have been in service since March and are intended for operations in the strategically important Persian Gulf. The breach highlights vulnerabilities in military equipment and defense supply chains, particularly concerning the security assurances provided by third-party suppliers.10
As military operations increasingly rely on advanced technology, the implications of such security lapses could be profound, affecting not only operational integrity but also national security.
“The £12 million K3 Scout drone fleet, supplied by Kraken Technology Group, was found to be sending automated 'heartbeat' communications to a server in China. The MoD's investigation found no evidence of data compromise, but the incident has raised concerns about the vetting of commercial components in military systems.”
Firstpost
