16 Jul Afghan Protection Schemes: UK Government Data Breach
This is an update regarding the Afghan Relocations and Assistance Policy (“ARAP”). Our separate update regarding our client’s recent successful judicial review of the ARAP “Triples Review” is here.
At 12:00 on 15 July 2025, the UK Government revealed a major data breach involving the personal details of 18,714 ARAP applicants, originally lost on 22 February 2022. The breach went undetected until August 2023, when some of the data appeared online. In response, the government launched a secret relocation scheme—the Afghanistan Response Route—for those deemed most at risk, and secured a “super injunction” preventing any reporting of the breach or the injunction itself. This was lifted on 15 July 2025, allowing limited public disclosure.
The breach poses serious potential safety risks for individuals still in Afghanistan if their details have reached Taliban authorities. ARAP applicants already in the UK may also fear for family members left behind. While the UK government claims the risk is low, its past assessments of Taliban threats have often been unreliable.
Notifications were sent to affected individuals, but only moments before the breach was made public, giving them little time to prepare.
Individuals can use the MOD’s Self Checker tool to check if they may have been affected by the data breach. However, the tool has limitations—it doesn’t allow searches by name or email, and ARAP references may be unfamiliar or incorrectly recorded in the leaked data.
Where does this news leave ARAP applicants?
- Individuals in Afghanistan awaiting ARAP decisions—whether principal applicants or family members— may now face significantly heightened Taliban threats. As a result, they may wish to submit further representations and request an expedited decision.
- Members of the “Triples” units were already experiencing delays due to the unlawful operation of the Triples Review (see linked update above). The data breach reveals additional risks they face, and they may also wish to submit further representations and request an expedited decision.
- New ARAP applicants: the UK Government abruptly closed the ARAP scheme to new applications on 1 July 2025. As a result, individuals who had planned to apply and are now concerned about risks from the data breach are unable to do so—unless the closure is successfully challenged through judicial review.
- Individuals who have been affected by the data breach: may have a claim for compensation against the Ministry of Defence. Anyone wishing to enquire about bringing a claim should contact a solicitor as soon as possible.
Existing DPG clients should contact their solicitor with any concerns or queries.
DPG’s Afghan Cases team can be contacted on AfghanClaims@dpglaw.co.uk for further information.
For further details on our Afghan protection schemes work see e.g.:
https://dpglaw.co.uk/high-court-quashes-refusal-to-issue-visa-to-british-forces-interpreter/
https://dpglaw.co.uk/afghans-awaiting-transfer-to-uk-judicial-review/
https://dpglaw.co.uk/afghan-resettlement-schemes-dpg-evidence-of-serious-problems/
https://dpglaw.co.uk/afghan-relocation-schemes-judicial-review-re-afghan-triples-forces/
https://dpglaw.co.uk/dpg-named-legal-aid-firm-of-the-year/
Share this story
