Did Kremlin hack Army data in search of spy recruits? Identities of more than 100 would-be troops are accessed from computer in possible Russian intelligence sting

  • Identities for more than 100 British Army recruits have been hacked
  • Some believe the hack could be Russia attempting to find potential spies
  • The MOD said hackers threatened to dump the stolen data onto the dark web 

The identities of more than 100 potential British Army recruits have been hacked from a UK defence computer in a possible Kremlin intelligence sting.

A third party feared to have been a Russian agent infiltrated the database in a shocking security breach.

A third party feared to have been a Russian agent infiltrated the database in a shocking security breach

The Ministry of Defence admitted last night that the records of 124 potential candidates were illegally accessed, but it is thought hundreds more could have been at risk.

Hackers also apparently threatened to dump stolen details on the ‘dark web’ – hidden internet sites accessed via special software where criminality is rife.

The data breach triggered a frantic investigation by defence chiefs and the Information Commissioner’s Office.

The Ministry of Defence admitted last night that the records of 124 potential candidates were illegally accessed, but it is thought hundreds more could have been at risk

It also led to the Army closing its online application portal, while top brass contacted those whose personal information had been stolen. The computer system was managed by Capita, an outsourcing company that receives about £3billion a year in public sector contracts and has previously been criticised over its ‘abysmal’ recruitment process.

Tory MP Mark Francois, a former defence minister, said last night: ‘This security breach is extremely concerning, not least in light of Russia’s war in Ukraine and Russia’s long history of hostile cyber operations.’

It is thought the motive for the hack might have been to target recruits as potential agents in the British Army.

The data exposed included full names, dates of birth, addresses, qualifications, previous employment details and family information.

Hackers also apparently threatened to dump stolen details on the ‘dark web’ – hidden internet sites accessed via special software where criminality is rife

The hack emerged days after the Five Eyes intelligence alliance – the UK, the US, Australia, New Zealand and Canada – warned the Kremlin is planning attacks on the internet infrastructure of the MoD and other government organisations.

Asked about the attack on Capita’s recruits database, defence minister Leo Docherty said: ‘On Monday March 14, Army HQ were made aware of a breach of information in relation to potential Army candidate data. The breach related to 124 potential candidates whose accounts had been accessed on March 13.

‘After an initial investigation… the MoD submitted the formal breach notification to the Information Commissioner’s Office on Monday March 21.’

The hacked computer programme is known as the Defence Recruitment System (DRS). Managers had apparently removed a two-stage security process in an attempt to make the site more user-friendly.

Security fears arising from the hack will be discussed today by MPs on the Commons defence committee.

Capita has a £900million contract with the MoD to run Army recruitment. In 2020 the company faced fierce criticism after it emerged that 25,000 potential soldiers had turned their backs on a military career due to issues with the online application system.

The infiltration comes after defence chiefs banned Army commanders and soldiers from using the WhatsApp messaging service over security fears.

It is suspected Russia has used mobile phone data to pinpoint the whereabouts of foreign fighters in Ukraine.

This information apparently led to the cruise missile strike on the Yavoriv training base in western Ukraine last month. More than 30 rockets were fired.

An Army spokesman said last night: ‘Following the compromise of a small selection of recruit data, the Army’s online recruitment services were temporarily suspended pending an investigation.

‘This investigation has now concluded, allowing some functionality to be restored and applications to be processed.’

A Capita spokesman said: ‘An in-depth third party investigation has concluded that no breaches of DRS occurred to our MoD-accredited system.’

The comments below have been moderated in advance.

The views expressed in the contents above are those of our users and do not necessarily reflect the views of MailOnline.

We are no longer accepting comments on this article.