Defence Personnel Data Breach

John Redwood Excerpts

Tuesday 7th May 2024 Commons Chamber

[Grant Shapps]

My hon. Friend will be pleased to hear that we have written to each of those organisations today, both to enlist their support and to provide the detail and information to which the House has been privy this afternoon.

In answer to my hon. Friend’s specific question, a commercial organisation will now be monitoring the personal data of the individuals affected. That would include, for example, the data being used in a suspicious way, appearing on the dark web, or any other outcome. In a way, an additional layer of security will be attached to these individuals. Again, I can confirm that, as of this moment, we have seen no suspicious activity at all on those accounts.

[Sir John Redwood (Wokingham) (Con)]

Is there any indication of how the thief wanted to use the data, if they have actually got it? Have all the staff been advised to change accounts, passwords and internet access in every way, so that no further harm can occur?

[Grant Shapps]

In answer to the first point, no, there is no indication. On the second point, our regular approach—I speak as someone with an MOD account—is that passwords have to be changed regularly in order to continue to use the system, so those security measures are in place. People do not need to change their bank accounts as a result of this incident. Apart from anything else, using someone’s bank details to make a payment somewhere else would be technically difficult, as a new account would need two-factor authentication, so it is not necessary for people to change their accounts. The monitoring service will provide an overlay of additional reassurance to them.