UK Investigates Confirmed Cyberattack Linked to China

The UK's Foreign Office is currently probing a confirmed cyberattack that was discovered in October, according to senior government officials.

Trade Minister Sir Chris Bryant stated during an interview with Times Radio that "there certainly has been a hack," but emphasized that it is too early in the investigation to confirm many of the widely reported details. The incident was initially reported by The Sun, which claimed that Chinese state-sponsored actors were responsible and potentially stole data related to tens of thousands of visa applications.

However, Sir Chris cautioned against sensationalism, noting that many of the reports by the tabloid are speculative. He reassured the public, saying, "The front page of The Sun is slightly over-egging the details that are available at this stage," and that their primary concern is ensuring no individuals are harmed.

Regarding the nature of the attack, Sir Chris confirmed, "There has been a hack, I can say that. I'm not able to say whether it is directly related to Chinese operatives, or indeed the Chinese state." He also mentioned that the investigation has been ongoing since October, similar to other recent cyber incidents involving organizations like JLR, M&S, and the British Library, which require time to fully understand.

The Foreign, Commonwealth, and Development Office (FCDO) has been asked for further details on which systems are under investigation and how the attackers gained access, but a spokesperson only responded that, "We have been working to investigate a cyber incident. We take the security of our systems and data extremely seriously."

Sir Chris also told Sky News that the breach was quickly contained, stating, "We managed to close the hole, as it were, very quickly," and that the incident involved a technical issue at one of their sites. He added that the risk to individuals remains low.

The news coincides with recent findings from cybersecurity firm Check Point Software, which reported that Chinese cyber-espionage groups have targeted several victims across Europe, aiming to expand their espionage efforts. While the specific governments targeted were not named, it is part of a broader pattern of increasing Chinese cyber activity.

In recent years, the UK has identified China as a significant geopolitical threat. GCHQ Director Anne Keast-Butler highlighted at CYBERUK 2024 that more resources are allocated to confronting Chinese cyber risks than any other threat. She described China as having developed advanced cyber capabilities and leveraging a growing ecosystem of hacking groups and data brokers, with ambitions to influence global technology standards and establish technological dominance within the next decade.

While China is viewed as a long-term strategic threat, Russia remains an immediate concern. MI6 Director Blaise Metreweli, in her first speech since appointment, described the UK's current stance as operating "between peace and war," citing a "grey zone" of conflict with Russia that is just below the threshold of actual war.