London/Kabul (Agencies) July 19, 2025: The UK Ministry of Defence (MoD) has confirmed it will not offer compensation to thousands of Afghan nationals whose personal details were exposed in a catastrophic 2022 data breach, sparking outrage among affected families and legal advocates.
The breach, which occurred when an unnamed official mistakenly emailed a spreadsheet containing the names and contact details of over 19,000 Afghan applicants for the Afghan Relocations and Assistance Policy (ARAP), has left many fearing Taliban retribution. The leak only came to light in August 2023, when portions of the data appeared on Facebook.
Despite the gravity of the incident, the MoD stated it would “robustly defend against any legal action or compensation,” dismissing potential claims as “hypothetical.” Officials also confirmed they would not proactively issue payouts to those whose lives were endangered by the breach.
An independent inquiry, known as the Rimmer Review, commissioned by Defence Secretary John Healey, concluded that it was “highly unlikely” individuals listed in the spreadsheet would be targeted solely for appearing on it. The review also found “little evidence of intent by the Taliban to conduct a campaign of retribution against former officials,” prompting the lifting of a super-injunction that had previously barred public discussion of the breach.
However, legal challenges are mounting. Barings Law, a Manchester-based firm, is preparing a class-action lawsuit on behalf of over 1,000 Afghan clients, seeking damages for emotional distress and endangerment. Some legal experts estimate individual claims could reach £50,000, potentially costing the UK government up to £1 billion if all affected parties pursue legal action.
Among those impacted is “Ahmed,” a former Afghan interpreter for British forces, now residing in the UK. He revealed that his family members, still in Afghanistan, were named in the leaked data and are now living in fear, frequently changing locations to avoid detection. “Compensation won’t fix this,” he told BBC Radio 4. “We need action—swift relocation to safety”.
The MoD has previously paid £1.6 million in compensation for a separate 2021 data breach involving 265 Afghan nationals, but has ruled out similar measures for the larger 2022 incident. The Information Commissioner’s Office (ICO) has declined further action, citing the high level of public scrutiny already faced by the MoD.
The breach also compromised the identities of over 100 British officials, including members of MI6 and special forces, raising broader concerns about the UK’s data security protocols.
As legal proceedings gather momentum, immigration advocates are urging the government to reopen resettlement routes and prioritize the safety of those still stranded in Afghanistan. The fallout continues to test the UK’s commitment to those who risked their lives supporting British operations during the war.