CSIDB logo
Incident

UK Government

Incident posture

Attack window
Dec 2025
Location
United Kingdom
Status
Unknown
CIA posture
Available to members
Updated
2026-08-27 01:22

Linked entities

Victim
UK Government
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Undetermined
Discovered
Oct 2025
Disclosed
Dec 2025
Resolved
Pending

Summary

The UK government said it is investigating a cyber incident after media reports suggested possible unauthorized access to confidential documents held by the Foreign, Commonwealth and Development Office. Trade Minister Chris Bryant noted that the inquiry is underway and that officials assess the risk to personal information as fairly low. He added that the allegations arise amid strained diplomatic ties with China and that the government aims to maintain a pragmatic approach while addressing concerns about espionage.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

0 techniques

Description

The UK government publicly acknowledged on Friday, December 22 2025, that it is investigating a cyber incident after media reports emerged linking the breach to hackers allegedly associated with China. Trade Minister Chris Bryant confirmed that the investigation had commenced in October 2025 and emphasized that officials assess the risk to personal information as fairly low. He stated that the government’s acknowledgment followed news coverage suggesting that confidential material held by the Foreign, Commonwealth and Development Office might have been compromised.

According to The Sun newspaper, a hacking group identified as Storm 1849, which is reported to have ties to the Chinese government, may have gained access to thousands of confidential documents, including information related to tens of thousands of visas. Bryant dismissed these claims as pure speculation, noting that he did not wish to fuel further conjecture and that it remained uncertain whether the alleged activity was directly linked to China. He reiterated that the government’s position was based on the information available at the time and that no definitive conclusions had been drawn regarding the scope or origin of the incident.

The disclosure occurs amid a delicate phase in United Kingdom–China relations, as Prime Minister Keir Starmer’s administration seeks to rebuild trade and diplomatic ties that have been strained by concerns over Chinese espionage and human‑rights issues. Starmer is reportedly scheduled to travel to China in late January 2026, which would mark the first visit by a British prime minister since 2018. Concurrently, the government has postponed a decision on China’s proposal to construct a large new embassy in London, a move criticized by some observers who argue the facility could serve as a base for espionage activities. Bryant described the government’s approach as pragmatic, asserting that Britain will cooperate with China where possible while challenging Beijing in areas that conflict with UK interests, and stressed that the relationship must be pursued with eyes wide open.

Sources

Sources available to members: 1 source.

CSIDB