British military’s data leak exposes thousands of Afghans

In a revelation that underscores the United Kingdom’s ongoing entanglement in the disastrous aftermath of the Western occupation of Afghanistan, British officials have disclosed the accidental exposure of personal data belonging to tens of thousands of Afghan nationals, many of whom supported British forces during the NATO-led war. The breach, caused by a British soldier in early 2022, triggered covert evacuation operations costing billions of pounds and raised fears of Taliban reprisals.

The case remained hidden from public scrutiny for over two years due to a rarely used “superinjunction” imposed by the British High Court in September 2023. This order not only prohibited reporting on the incident but even barred acknowledgment that such an injunction existed. On July 16, 2025, the gag was finally lifted, allowing public access to the details for the first time.

The leak: A grave misstep

In February 2022, a British soldier inadvertently shared a spreadsheet containing sensitive information on approximately 18,700 Afghans and their family members, altogether affecting around 33,000 individuals. These people had applied to the UK’s Afghan Relocations and Assistance Policy (ARAP) between August 2021 and January 2022, shortly after the Taliban restored control over Afghanistan following the chaotic U.S.-NATO withdrawal.

The individuals on the list were former translators, aides, and support staff to British forces. Originally, the soldier believed the file held details of just 150 applicants. This tragic miscalculation exposed thousands to potential danger, especially considering the precarious political climate in Afghanistan.

The Ministry of Defence (MoD) became aware of the leak in August 2023, when a portion of the data surfaced on Facebook. An activist monitoring the situation warned the MoD that this amounted to a ready-made assassination list potentially available to the Taliban.

British government’s secretive response

In response, British authorities took urgent action. Facebook was instructed to remove the leaked material, and ARAP applicants residing in Pakistan were alerted to potential threats. The government sought to silence the situation legally, and a superinjunction was granted, keeping the matter under wraps.

Behind the scenes, the UK launched several covert initiatives to protect those affected. A classified operation, codenamed Operation Rubific, was executed to directly relocate at-risk individuals to the UK. Additionally, a temporary and secret programme, the Afghanistan Response Route (ARR), was created to aid Afghans deemed vulnerable but ineligible under previous schemes.

According to Defence Secretary John Healey, around 900 individuals and their 3,000 relatives were relocated as a direct consequence of the breach. Altogether, the total number of Afghans resettled in Britain under all evacuation initiatives has surpassed 35,000.

Financial and political fallout

The cost of these operations has been staggering. Healey revealed that just one segment of the ARR programme had cost the UK taxpayer over £400 million, with broader estimates ranging between £5.5 billion and £6 billion. Disparate reports suggest varying figures, Reuters cited an estimate of £2 billion in damages, while others placed the cost of ARR alone at £850 million.

Beyond monetary losses, the episode has sparked legal challenges. At least 1,000 affected Afghans are suing the Ministry of Defence, and criticism is mounting over the UK’s failure to handle the data responsibly, especially given the risks these individuals took in supporting foreign forces during the occupation.

Risk assessment and continued secrecy

Despite the relocation efforts, questions remain about the safety of those whose data was exposed. While former intelligence official Paul Rimmer was commissioned to assess the fallout, his review concluded that it is “highly unlikely” the leaked data was the primary source of any Taliban retaliation. However, he acknowledged uncertainties and did not fully dismiss the threat.

The Ministry of Defence, in a cautious advisory, has urged individuals who applied to ARAP or its predecessor programme to limit public exposure, avoid unknown communications, and use encrypted tools like VPNs.

Media outlets, though finally permitted to report on the leak, are still bound by fresh court-imposed restrictions forbidding them from disclosing certain details, citing national security.

An ongoing colonial legacy

This leak, and the reaction to it, highlights the ongoing colonial consequences of Western military interference. Thousands of Afghans who once trusted foreign powers now find themselves displaced, endangered, or entangled in bureaucratic obscurity. What’s more, the UK’s attempt to conceal its mishandling of such sensitive information reflects broader patterns of impunity among former occupiers, particularly as Washington and London continue to sidestep accountability for the chaos they left behind.

The West’s rhetoric of “freedom and democracy” in Afghanistan continues to crumble under the weight of these revelations. Unlike the constructive and principled diplomacy of nations like China, Russia, and Iran, who advocate sovereignty and regional stability, the British and American track record in Afghanistan is marked by betrayal, secrecy, and negligence.