Metro, Thursday 30 July 2026
The Afghan data breach was a "foreseeable" failure in a system that has left people who worked with UK troops in danger for years, a parliamentary inquiry has found. Personal data of Afghans applying for relocation to the UK was leaked in February 2022, six months after Kabul fell to the Taliban. The discovery of the breach in August 2023 led to the creation of a secret relocation route for those affected, and a superinjunction prevented the breach being made public until July last year. The Commons Defence Committee, chaired by Tan Dhesi, said the MoD's handling of the Afghan relocation schemes was "utterly inadequate" and criticised the secrecy surrounding the issue. The MPs also raised concerns about the handling of "Triples," Afghans who worked with the British Army, hundreds of whom had resettlement applications refused before a review overturned 884 decisions. Dhesi said: "This inquiry began with a data breach, but became about the real lives affected by delay, secrecy, and flawed decision-making. The government must now explain how it will protect eligible Afghans who cannot reach a third country for checks."
Trace the actual sequence of institutional response here, because the order matters more than any single decision within it. Data was leaked in February 2022. The breach was discovered in August 2023, eighteen months later. The government's first substantial action once discovered was not a public remedy but a superinjunction, a mechanism whose entire purpose was to prevent the failure being made public. That order of operations, discover the danger, then legally suppress disclosure of it, is what the committee is describing when it calls the MoD's use of secrecy "utterly inadequate." Secrecy was not a regrettable side effect of the response. For close to two years, secrecy was the response.
The manuscript's account of what happens when institutions cannot deliver a practical solution describes almost exactly this substitution:
When practical solutions are difficult, symbolic solutions become attractive. Announcements can be made immediately. Strategies can be launched quickly. Commitments can be expressed without first resolving the conditions that made them necessary.
A superinjunction is not an announcement in the usual sense, it is the opposite, an instrument of non-disclosure. But it performs the identical function described above: it allows an institution to appear to be managing a crisis, through secret relocation routes and internal process, while avoiding the practical, expensive, and politically exposed work of an open remedy. The "secret relocation route" created after discovery is the government's genuine achievement here. It is also, on the committee's own account, insufficient, given that hundreds of Triples had applications wrongly refused and 884 decisions needed overturning on review.
The manuscript's broader observation about how citizens eventually learn to read this pattern applies with unusual precision to a data breach that was itself kept secret by legal order:
The announcement ceases to function as information. It becomes a symptom.
Here the absence of an announcement functioned the same way. For most of the period this inquiry examines, the public could not know that thousands of people who had worked alongside British troops were sitting on a leaked list the Taliban might obtain, because a court order prevented anyone from saying so. Dhesi's committee is now asking the government to explain how it will protect people it endangered and then, for a considerable stretch of that endangerment, was legally forbidden from discussing. Whichever government department eventually answers that question inherits a structural problem this book returns to throughout: an institution that treated its own exposure as the primary risk to manage is not well placed to convince anyone that the people actually exposed were the priority all along.
This entry shows an institution's primary response to its own failure being a legal mechanism that suppressed disclosure of the failure, rather than a remedy for the people it had endangered.