Stay up to date with notifications from The Independent

Notifications can be managed in browser preferences.

UK’s Defence Academy hit by cyberattack which caused ‘significant’ damage

Attack was possibly launched by hostile foreign state such as Russia or China, says Air Marshal Edward Stringer

Tom Batchelor
Sunday 02 January 2022 21:02 EST
Comments
The security breach was discovered in March 2021 and the Defence Academy was forced to rebuild its network
The security breach was discovered in March 2021 and the Defence Academy was forced to rebuild its network (PA)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

The UK's Defence Academy was hit by a cyberattack last year which caused “significant” damage, according to a retired high-ranking officer.

Air Marshal Edward Stringer said the attack was possibly launched by a hostile foreign state such as Russia or China.

Speaking to Sky News, Air Marshal Stringer said the security breach was discovered in March 2021 and the Defence Academy, which teaches thousands of military personnel, diplomats and civil servants each year, was forced to rebuild its network, with the damage yet to be fully rectified months on.

Commenting on the likelihood of the attack being linked to a foreign government, like Iran or North Korea, AM Stringer said: “It could be any of those or it could just be someone trying to find a vulnerability for a ransomware attack that was just, you know, a genuine criminal organisation.”

He said there were “costs to ... operational output” and “opportunity costs in what our staff could have been doing when they were having to repair this damage”.

“There are not bodies in the streets but there's still been some damage done,” he said, adding that the “unusual activity” was discovered by contractors working for outsourcing company Serco.

He said there were “external agents on our network who looked like they were there for what looked pretty quickly like nefarious reasons”.

Sky News reported that no sensitive information was stored on the academy's network. AM Stringer said the attack was not successful and while the hackers may have been using the academy as a “backdoor” to other Ministry of Defence (MoD) systems, there were no breaches beyond the school.

An MoD spokesperson told Sky News: “In March 2021 we were made aware of an incident impacting the Defence Academy IT infrastructure.

“We took swift action and there was no impact on the wider Ministry of Defence IT network. Teaching at the Defence Academy has continued.”

The Defence Academy, based in Shrivenham, close to Swindon, offers courses to 28,000 people a year on themes including leadership, information warfare, cyber capabilities and international engagement.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in