The UK government is responding to a cyber attack that targeted sensitive systems, with officials confirming that work is underway to understand the full scale of the incident and its potential consequences. Cyber security teams are actively assisting government departments to investigate the breach, which a minister acknowledged occurred in October.
Trade Minister Sir Chris Bryant said inquiries are ongoing, while reports indicate a group with links to China may be involved. However, the government has not publicly attributed responsibility. A spokesperson noted that efforts are continuing to determine the nature and impact of the intrusion.
The National Cyber Security Centre said it is collaborating closely with government partners to assess how the breach occurred and what data may have been affected. Systems operated by the Foreign Office but belonging to the Home Office were accessed during the incident, prompting a review of security measures.
Sir Chris told BBC Breakfast that "the security gap was closed pretty quickly" and added that "we think that it is a fairly low-risk that individuals will have been compromised or affected". Speaking to Times Radio, he stated: "I'm not able to say whether it is directly related to Chinese operatives, or indeed the Chinese state".
News reports suggest that visa-related information may have been among the data accessed, though the government has not confirmed this. The matter has been referred to the Information Commissioner's Office for oversight.
Intelligence agencies have highlighted increasing cyber espionage from China, targeting both political and commercial sectors.
GCHQ revealed last year that it dedicates more resources to countering Chinese threats than any other nation.
Sir Chris noted: "Government facilities are always going to be potentially targeted" and added: "We are working through the consequences of what this is." Any confirmation of Chinese state involvement could complicate diplomatic plans ahead of Sir Keir Starmer’s scheduled visit to Beijing next year, the first UK prime ministerial trip since 2018.
The government has said engagement with China is necessary due to shared priorities in trade, climate change, and other global matters, while allowing room to address security concerns directly.
China has consistently rejected accusations of cyber attacks, with a London embassy spokesperson last year saying that "accusations such as Chinese espionage, cyber-attacks, and transnational repression against the UK are entirely fabricated, malicious slander".
Earlier this month, Sir Keir stressed that UK policy towards China must be consistent.
He described China as a defining force in technology, trade, and global governance, while acknowledging the "reality" that China "poses national security threats".
Experts have warned that outdated systems leave government departments vulnerable. Jamie MacColl from the Royal United Services Institute said old IT infrastructure is common across departments.
Jake Moore of ESET added that "they will continue to be targeted" unless stronger digital protections are put in place.
