🔗 Share this article

A whistleblower has told an official investigation that the UK failed to secure confidential technology permitting Afghanistan's rulers to identify Afghans who collaborated with western forces.

Data Breach Puts Thousands at Risk

The source, called Person A, testified that individuals impacted by the data leak were advised to change residences and change their contact details to protect themselves from the ruling authorities.

Lawmakers are investigating the Conservative government's management of a serious disclosure of private information concerning approximately 19k individuals who had asked to come to the UK to avoid the Taliban.

How the Leak Happened

A data file including confidential details, such as names, addresses and occasionally household data, was accidentally leaked by a staff member employed at special operations center in February 2022.

The incident was discovered months later, when the names of several individuals who had requested to move to Britain appeared on Facebook.

Taliban Capabilities

“There seems to be a misunderstanding that Afghan rulers lack comparable resources that western nations possess,” she told the committee.

Technology was deserted in Afghanistan; they have it. If they have your phone number, they can trace you down to within metres. That is what intelligence groups achieved.”

Under inquiry about whether the Taliban possessed necessary encryption, the source confirmed: “They have complete capability.”

Aftermath of the Security Lapse

Early investigations presented to the committee estimated that at least 49 family members and colleagues of people concerned by the incident had been murdered.

A legal restriction concerning the incident was implemented in August 2023 and prevented relevant facts about it from being made public until mid-2025.

Protective Actions

Due to legal constraints, the source and the volunteer organization associated with told individuals at risk they were supporting that they had “suspicions that certain devices had been intercepted”.

“Our suggestion was that they change residence where feasible and switched their contact details. These represented the primary information that, if the Taliban obtained such data, would cause their location being found,” she said.

Contested Findings

Person A contested that internal investigation performed by an ex-government employee had been incorrect to determine that the obtaining of the records by the Taliban was “unlikely to substantially change an individual's existing exposure”.

“The crucial point is that affected people are not confronting the authorities; they are in hiding. Everything boils down to their previous employment.”

Person A described horrific violence suffered by concerned people, including electric shock torture, interrogation techniques, and severe beatings.

“Instances include toddlers who have had their arms broken to pressure the family to say where someone is,” she testified.