No evidence of data breach after Chinese-made component found in Navy drones, MoD says

The Ministry of Defence (MoD) has stated there is no evidence of data or system breaches following the discovery of a Chinese-made component in the Royal Navy's new K3 Scout sea drones. During a routine cyber vulnerability assessment, it was found that the drones' cameras sent a squark, or heartbeat communication, to a Chinese IP address. This signal can indicate system start-up, functionality, and potentially location data.

However, the MoD's spokesperson emphasized that there is no evidence to suggest the MoD's data or systems were accessed, compromised, or transmitted externally. The MoD reiterated that its assurance and testing processes are designed to identify and address potential vulnerabilities early, and that routine security activities are ongoing across its systems and equipment.

This incident is particularly embarrassing for the MoD, which, like most NATO countries, has a ban on Chinese components in military equipment due to concerns over espionage. The K3 Scout drones, capable of remote surveillance and supporting various mission profiles, are manufactured by Kraken, who claimed to have been assured of the equipment's security. Despite this, the unapproved Chinese-made camera component remains an issue.

Kraken, the supplier of the 20 new K3 sea drones, remains confident that no sensitive information has been shared, stating that they are addressing the security lapse. The incident highlights the ongoing reliance on Chinese supply chains, even within the defense sector, which has taken measures to prevent espionage.