Thousands of Afghans Left in Limbo After Data Breach, Compensation Claims Mount
Thousands of Afghan nationals are facing uncertainty after a significant data breach by the UK Ministry of Defence (MoD) exposed their personal information. The breach, which occurred in February 2022, involved a spreadsheet containing the details of approximately 18,700 Afghans who had assisted British forces and applied for relocation schemes. While the UK government has publicly apologized and implemented a secret relocation scheme, many affected individuals may not receive compensation, sparking legal action and public outcry.
Details of the Catastrophic Data Breach Unfold
In February 2022, an MoD official mistakenly emailed a spreadsheet containing sensitive data of Afghan nationals outside secure government channels. The spreadsheet included personal information of those who applied under the Afghan Relocations and Assistance Policy (ARAP) and Ex-Gratia Scheme (EGS) on or before January 7, 2022. The breach was discovered in August 2023 when a portion of the leaked data surfaced on Facebook.
Super-Injunction Lifted, Revealing Government Secrecy
For over 600 days, a High Court super-injunction prevented public reporting of the data breach. This injunction, granted in September 2023, was finally lifted on July 15, 2025, revealing the full extent of the breach and the existence of a secret relocation scheme known as the Afghanistan Response Route (ARR). A judge had previously deemed the secrecy "fundamentally objectionable". Defence Secretary John Healey has issued a "sincere apology" to those affected.
Secret Relocation Scheme and Closure of ARAP
In response to the data breach, the UK government established the Afghanistan Response Route (ARR) in April 2024 as a covert program to relocate Afghans deemed to be at the highest risk. However, this route has now closed. Adding to the controversy, the Afghan Relocations and Assistance Policy (ARAP) scheme, which provided a pathway for Afghan nationals to relocate to the UK, was "abruptly closed" to principal applicants on July 1, 2025.
Legal Firms Pursue Compensation for Victims
Law firms like Barings Law and Leigh Day have begun representing affected Afghans in group compensation claims against the UK government. Barings Law has already signed up nearly 1,000 clients. Lawyers estimate that compensation amounts could be in the thousands of pounds per person, with potentially higher payouts for those still in Afghanistan. The legal actions aim to address the "anxiety, fear, and distress" caused by the data breach and the potential risks to the safety of those whose information was exposed.
ICO Response and Previous Data Breach
The Information Commissioner's Office (ICO) had previously fined the MoD £350,000 in December 2023 for a separate data breach in 2021 that also involved Afghan nationals. While the ICO acknowledges the seriousness of the current breach, it has stated that it will not take further action due to the previous enforcement and the MoD's mitigation efforts.
Potential Consequences and National Security Concerns
The consequences of the data breach are far-reaching. The UK government faces substantial legal claims and potential compensation payments that could amount to millions of pounds. Concerns remain about the increased safety risks for Afghans, who collaborated with British forces and the exposure of British spies and special forces identities.
Identities of British Spies and Special Forces Exposed
Recent reports on July 17, 2025, have revealed that the data leak not only compromised the safety of Afghan nationals but also exposed the identities of British spies and special forces. This development raises serious national security implications, further complicating the fallout from the breach.
ILPA Urges Reopening of ARAP Scheme
The Immigration Law Practitioners Association (ILPA) has urged the government to reopen the Afghan Relocations and Assistance Policy (ARAP) scheme, which closed to principal applicants on July 1. This call comes amid growing concerns about the safety and well-being of Afghan nationals who are now at increased risk due to the data breach.
