UK government admits data stolen in cyber incident

Government data has been stolen during a cyber incident in October 2025 when a system operated on behalf of the Home Office by the Foreign, Commonwealth and Development Office was targeted. It says the risk to individuals was low and that the incident was discovered and resolved quickly.

The Sun newspaper reported that a Chinese cyber gang known as Storm 1849 was responsible for the breach, adding that tens of thousands of visa details were potentially accessed, although the government has refused to comment on the specifics of the incident.

Trade minister Chris Bryant told Times Radio: “There certainly has been a hack. I’m not able to say whether it is directly related to Chinese operatives, or indeed, the Chinese state.”
He added: “Government facilities are always going to be potentially targeted. We are working through the consequences of what this is.”

The incident at the Foreign Office follows two major cyber attacks on big British companies this year. Hacks forced the country’s largest car maker, Jaguar Land Rover, to shut down production for five weeks, while retailer Marks & Spencer suspended online orders for six weeks.

Meanwhile, an ITV News investigation has reported concerns from whistleblowers about the government’s new digital ID framework, warning that the technology that underpins the system could be flawed, putting the personal data of UK citizens at risk.

The system – One Login – is already used by around 13m people for key services such as managing pensions, passport renewals and professional registration, and the government plans for the system to be used for the mandatory digital ID system for all adults by 2029.



Share Story:

YOU MIGHT ALSO LIKE


Building cyber resilience in a complex threat landscape
Cyber threats are evolving faster than ever. This episode explores how organisations can strengthen defences, embed resilience, and navigate regulatory and human challenges in an increasingly complex digital environment.

The Future of Risk & Resilience with AI & Data
CLDigital's Co-Founder, Tejas Katwala, joins CIR Magazine to discuss how CLDigital is transforming enterprise risk and resilience. By integrating business processes, AI and data-centric strategies, organisations can move beyond compliance to proactive risk management – simplifying operations, strengthening resilience, and driving business performance. Listen now to explore the future of intelligent risk management.