No data breach evidence found after Chinese component in Navy drones, MoD says

The British Ministry of Defence (MoD) has stated there is no evidence of a systems or data breach following the discovery of a Chinese-made component within the Royal Navy's new sea drones. The finding occurred during a routine cyber vulnerability assessment of the K3 Scout drones.

During the assessment, it was noted that the drone cameras transmitted a 'squawk,' also known as a 'heartbeat communication,' to a Chinese IP address. While a squawk can indicate a system is operational and functioning correctly, it can also potentially carry location information.

“

A thorough investigation found no evidence of MoD data or systems being accessed, compromised or transmitted externally.

A spokesperson for the MoD confirmed that a thorough investigation yielded no evidence of Ministry of Defence data or systems being accessed, compromised, or transmitted externally. The MoD emphasized that its assurance and testing processes are designed to identify and address potential vulnerabilities early, and that routine security activities continue across its systems and equipment.

This incident is particularly sensitive for the MoD, as many NATO countries, including the UK, have banned Chinese components from military equipment due to espionage concerns. The K3 Scout sea drones are designed for surveillance and can support various mission profiles, including maritime awareness and force protection. The supplier, Kraken, stated it had received security assurances, but a third-party supplier of the drone cameras still incorporated Chinese-made components. Kraken expressed confidence that no sensitive information was shared, and the security lapse has reportedly been addressed.

“

Our assurance and testing processes are designed to identify and address potential vulnerabilities early, and we continue to undertake routine security activity across our systems and equipment.