The UK government quietly launched a secret relocation programme for Afghan nationals after a major data breach exposed the personal details of nearly 19,000 applicants seeking refuge.

The breach occurred in February 2022 when a British Ministry of Defence (MoD) official mistakenly released a dataset containing sensitive information about individuals who had applied to resettle in the UK following the Taliban’s return to power. The MoD only became aware of the error in August 2023, when some of the leaked data was discovered anonymously posted on Facebook.

In response to the potential danger to those affected, the UK established a covert relocation operation called the Afghan Response Route in April 2024. Nearly 9,000 Afghans have since been relocated to the UK or are in the process of being transferred through the scheme, which is estimated to have cost the government £850 million.

The existence of this classified operation had been protected under a legal injunction until a High Court ruling on Tuesday allowed its disclosure.

While the Ministry of Defence has not disclosed whether anyone has been arrested or harmed as a result of the leak, Defence Secretary John Healey is expected to provide further information in a statement to Parliament later in the day.

The data breach involved individuals who had supported British and allied forces after the 2001 invasion of Afghanistan. Many had applied through the Afghan Relocations and Assistance Policy (ARAP)—a programme launched in 2021 as US forces withdrew—to protect those facing threats from the Taliban.

However, the ARAP scheme has been the subject of intense criticism. A 2022 report by the Foreign Affairs Committee described it as a “disaster” and “betrayal,” citing its mismanagement and slow response during the chaotic withdrawal from Kabul.

This breaking story is developing, and further updates are expected.