The Ministry of Defence (MoD) has confirmed that cameras fitted to drones used by Royal Marines secretly transmitted data to a Chinese IP address, according to a report in The Daily Telegraph. The K3 Scout surveillance drone, in service with UK special forces since March, contained components sourced from a third party by defence contractor Kraken Technology Group. The cameras, manufactured in China, were found to be sending 'heartbeat communications'—routine signals that confirm operational status to remote monitors—prompting the MoD to disconnect their internet connectivity.
Investigation and Response
An internal investigation revealed the unauthorized data transmissions. An MoD spokesman stated: 'A routine cyber vulnerability assessment identified an issue affecting a Kraken Unmanned Surface Vessel sub-system used by the Royal Navy. A thorough investigation found no evidence of MoD data or systems being accessed, compromised or transmitted externally.' The spokesman emphasized that assurance and testing processes are designed to identify vulnerabilities early, with routine security activity ongoing across systems and equipment.
The K3 Scout drones were acquired as part of a £12.3 million package for 20 uncrewed boats in March. At the time, Second Sea Lord Vice Admiral Paul Beattie hailed the purchase as 'a significant milestone in our journey towards a Hybrid Navy,' adding: 'By integrating cutting-edge autonomous technology with our existing capabilities, we are ensuring that our forces remain at the forefront of maritime innovation and warfighting effectiveness.'
Broader Drone Investment
This incident comes amid a major push to expand drone use in the UK Armed Forces. In June, then-Defence Secretary Dan Jarvis announced £5 billion for a 'drone transformation' programme, accelerating the adoption of autonomous systems across all branches. The investment aims to enhance surveillance, logistics, and combat capabilities, but also raises new cybersecurity challenges.
The MoD's statement underscores the seriousness with which it treats equipment and data safety. 'The safety of equipment, networks and data is taken extremely seriously,' the spokesman said. The investigation found no evidence of external compromise, and the issue was resolved by removing internet connectivity from the affected cameras.
Experts note that such vulnerabilities are not uncommon in complex supply chains, especially when components are sourced from multiple countries. The incident highlights the need for rigorous testing and supply chain scrutiny, particularly for systems used in sensitive military operations.
The Royal Navy has faced increased scrutiny over security in recent months, with a reported surge in Russian warships in UK waters. This drone issue adds to concerns about technological vulnerabilities, though the MoD maintains that no data was lost. The K3 Scout drones remain in service, albeit with modified cameras.
