Cameras on Royal Navy K3 Scout Drones Found Sending Signals to an IP Address in China
The Facts
- Cameras fitted to the Royal Navy's K3 Scout uncrewed surface vessels were found transmitting "heartbeat communications" — signals confirming the devices were online and working normally — to an IP address in China, according to The Telegraph.
- The transmissions were identified during a routine cyber vulnerability assessment of the K3 drones, and the Ministry of Defence subsequently removed the cameras' internet connectivity.
- The drones were supplied by British defence contractor Kraken Technology Group, which sourced the cameras from a third party that had provided security assurances; the cameras were later found to contain Chinese-made components.
- The fleet is valued at about £12 million and has been operated by the Royal Marines since March.
- An MoD spokesperson said a thorough investigation found no evidence of MoD data or systems being accessed, compromised or transmitted externally.
- Reporting says the vessels were also intended for planned operations in the Persian Gulf, including the Strait of Hormuz.
- The disclosure has prompted broader questions about the security of foreign-made components in British military equipment and defence supply chains, and about the UK government's approach to relations with China.
- What data, if any, beyond status signals could have been exposed remains contested: the MoD says no sensitive information was sent, while the reporting notes the connection went undetected from March until the routine assessment.
Context
What is a "heartbeat communication"?
It is a routine status signal that a networked device sends to confirm it is online and functioning normally, so that whoever is monitoring it knows it is working EXPRESS,Metro,LBC. According to the reporting, the information exchanged in this case consisted only of such confirmations rather than imagery or operational data Independent,Коммерсант.….
What have the Ministry of Defence and Kraken said?
An MoD spokesperson said a routine cyber vulnerability assessment identified an issue affecting a Kraken uncrewed surface vessel sub-system used by the Royal Navy, and that a thorough investigation found no evidence of MoD data or systems being accessed, compromised or transmitted externally EXPRESS,Metro. A Kraken spokesperson said it was aware that some third-party cameras compliant with the US National Defense Authorization Act had an issue EXPRESS.
Who uses these drones and where were they deployed?
The K3 Scout uncrewed vessels have been operated by the Royal Marines since March, and reporting links them to Britain's special forces Telegraph,EXPRESS,Metro. The Mirror reported the discovery was made at the Special Boat Service's headquarters in Poole, Dorset Mirror, and other reporting says the vessels were also earmarked for planned operations in the Persian Gulf Deutsche Welle,Firstpost.
Where Left and Right agree, and where they split
- Where Left and Right agree
- Third-party assurances failed: a link to a Chinese IP address sat undetected from March until a routine check, and that lapse matters regardless of the MoD's no-data finding.
- Where Left and Right split
- Whether the story is about a procurement chain that bought £12 million of kit no one independently verified, or about a defence supply chain that cannot exclude Chinese components.
How left and right read it
Public procurement is only as trustworthy as the verification the public actually performs itself, and £12 million bought a capability whose camera security travelled down a chain of assurances from a third party to the contractor to the Ministry of Defence. That a connection to an IP address in China sat undetected from March until a routine assessment — on vessels intended for the Strait of Hormuz — is the accountability failure worth fixing, whatever the investigation concluded about data.
“It has been revealed that cameras on Royal Navy drones were connected to a system in China, prompting security concerns despite the Ministry of Defence insisting no sensitive data was compromised.” — The Independent
A defence supply chain that cannot vouch for its own components is not a sovereign one. Third-party security assurances proved worth little once Chinese-made parts turned up in cameras beaming heartbeat signals to an address in China, undetected from March until a routine assessment caught them — on vessels intended for the Strait of Hormuz. Assurances must be verified at every tier before kit reaches the water.
“Royal Navy spy drones used by Britain's elite special forces secretly sent data to China, The Telegraph can reveal.” — The Telegraph
The receipts — all 44 sources
Independent coverage (44)
Facts first. Then every angle.
The day’s biggest stories in one short brief — the facts everyone agrees on, then the competing values behind the headlines. Free in your inbox.