Defence Personnel Data Breach

Jim Shannon Excerpts

Tuesday 7th May 2024 Commons Chamber

[Grant Shapps]

Indeed, it was not my right hon. Friend’s favourite contractor on this particular occasion. None the less, we will be carrying out a comprehensive review of the contractor’s work. Again, I want to make it clear to the House that we did absolutely everything that we could to avoid this being made public until I had the opportunity to come to the House. We proactively endeavoured to ensure that our own approach towards removing the data that was online—closing that system down, ensuring the personnel were paid, making sure the alternative payments system was in place for expenses and other things—could all happen ideally before we came to the House. We most certainly did not wish to see nor brief out the story. Unfortunately, as a large number of people were impacted or potentially impacted, it was almost impossible to expect them not to go and talk about it, and I believe that that is how it came into the public domain.

My right hon. Friend is absolutely right about this. He is a champion for ensuring that these contractors do the jobs they are actually paid to do. We are now trawling through all the detail and, as I have said before, we will not leave this hanging. We will take every appropriate action because, as he might imagine, my entire team and I are very concerned about the welfare of our personnel—brave men and women who do not deserve to have this happen to them. We do not want to see it happen in the name of the MOD, either.

[Jim Shannon (Strangford) (DUP)]

I thank the Secretary of State for his statement and for his positive response in trying to assure our personnel. We saw this type of data breach with the Police Service of Northern Ireland, where information on officers and staff leaked, and the stress was palpable. What steps are the Secretary of State and Government taking to ensure that staff feel safe and protected, and that there is funding available for service personnel protection if necessary?

[Grant Shapps]

One big difference in this case is that it does not involve a member of armed forces personnel who did something wrong—this was done to them. It is not a case of someone opening an attachment or something of that nature. This is something that has happened through the system that the contractor ran. The hon. Gentleman is absolutely right to focus, as I hope I have today and as has the whole House, on the personnel and what it means to them, and in particular on reassuring them. I am grateful for the attitude and approach of the House, which I think will have largely done that for service personnel.

I will not reiterate each of the eight points. However, through the chain of command, the phone number that is now available, the information going on gov.uk and the wraparound services, including the fraud-checking service that staff will now individually have access to and many others, I hope personnel are reassured. Remember that we do not think the data has necessarily been stolen, but we are behaving as if it has in order to provide absolute security.