The British Ministry of Defence (MoD) has stated there is no evidence of a systems or data breach following the discovery of a Chinese-made component in the Royal Navy's new sea drones. The component, found in the drones' cameras during a routine cyber vulnerability assessment, was transmitting a signal, known as a heartbeat communication, to a Chinese IP address.
While a "squark" or heartbeat can indicate a system is operational, it can also convey location information. The MoD conducted a thorough investigation and concluded that no MoD data or systems were accessed, compromised, or transmitted externally. A spokesperson emphasized that the ministry's assurance and testing processes are designed to identify and address potential vulnerabilities early, and that routine security activities continue across its systems and equipment.
The discovery is particularly sensitive as many NATO countries, including the UK, have banned Chinese components from military equipment due to concerns over espionage. The K3 Scout sea drones, supplied by Kraken, are designed for a range of missions including maritime awareness, force protection, logistics, and precision strike. Kraken has stated it is confident that no sensitive information has been shared, despite a third-party supplier of the drone cameras incorporating Chinese-made components.
The incident highlights the ongoing challenges in sourcing materials and technologies free from Chinese supply chains, even within the defense sector, which has implemented measures to prevent espionage. The Royal Navy's procurement of 20 new K3 sea drones was intended to enhance its maritime surveillance capabilities.