Cyber Incident Victim: Foreign, Commonwealth and Development Office
Date:
Oct 2025
Location:
United Kingdom
Summary
TheForeign, Commonwealth and Development Office suffered a cyber intrusion that officials suspect was carried out by Chinese state‑backed actors, who accessed thousands of documents; the breach was reported by a newspaper and later confirmed by a trade minister who said the risk to individuals was low. Investigators have been examining the incident since its discovery, noting that while no formal attribution has been made, anonymous government sources link the activity to Beijing. The episode follows earlier hacks at Jaguar Land Rover and Marks & Spencer that disrupted services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In October 2025 the UK Foreign Office was hacked, a breach first reported by the Sun newspaper which said a Beijing-linked group had accessed thousands of documents. Trade Minister Chris Bryant confirmed the attack in broadcast interviews and said the risk to individuals was low. Bryant added that the loophole had been closed quickly and that individuals were unlikely to have been compromised. Bryant could not confirm who was behind the hack or whether there were any Chinese connections. Speaking on condition of anonymity, British officials said actors linked to the Chinese state are suspected of being behind the incident, though no formal attribution has been made. The UK government issued a statement saying it was investigating the cyber incident and takes the security of its systems and data extremely seriously. The incident has been under investigation since October.
The hack occurred while the UK is trying to recalibrate its relationship with China after a cooling in recent years linked to other hacks, espionage, and Beijing’s crackdown on democracy in Hong Kong. The Labour government’s official policy is to cooperate, compete and challenge China in order to reap trade benefits while guarding against security threats. Prime Minister Keir Starmer recently criticized the conviction of former Hong Kong media mogul Jimmy Lai and said he will travel to China on his first official visit as premier next month. Another point of tension has been the UK’s repeated delays over approving a proposed new Chinese Embassy in London, which would be the biggest in Europe and located near the City financial center above sensitive fiber‑optic cables.
Earlier in the year UK firms Jaguar Land Rover and Marks & Spencer were hit by cyberattacks that halted key services. Bryant referenced those incidents when he told the BBC that such cyberattacks are now a part of modern life that must be tackled and dealt with.