Question to the Ministry of Defence:

To ask the Secretary of State for Defence, how many (a) armed forces (i) personnel and (ii) families and (b) civil servants in his Department have been affected by personal data incidents related to Defence Children Services schools and settings in each year since 2010.

The number of personal data incidents that have been correctly reported to the Army Warning Advice and Reporting Point (WARP) that have affected Defence Children Services schools and settings since 2010 and the number of affected individuals that have been affected by personal data incidents related to Defence Children Services schools and settings in each year since 2010 is as below:

This data has been taken from Blackthorn Defence Incident Management Database (BT DIMDb) (which is directly fed by the Security Incident Reporting Forms (SIRFs) used across Defence) and the Army WARP Security Incident Database (SID).

It is not possible to split the affected individuals down into the categories stipulated in this question as that distinction is not made during reporting or investigation. It should also be noted that the number of people impacted is determined during the course of the investigation.

The 2021 figures include a major investigation into a cyber incident at a single school, which resulted in the potential compromise of 1110 internal (Ministry of Defence) email addresses and 3070 external (personal) email addresses.