Credit: UK Ministry of Defence / Wikimedia Commons (OGL v1.0)

Cameras fitted to Royal Navy surveillance drones used by British special forces have been secretly transmitting data to an internet address in China, according to an investigation published by The Daily Telegraph. The UK Ministry of Defence confirmed the incident, which was discovered during a routine cyber vulnerability assessment, and quietly removed internet connectivity from the affected systems.

The cameras were installed aboard K3 Scout unmanned surface vessels operated by the Royal Marines and other specialist British forces units. The K3 Scout fleet was supplied by British defense company Kraken Technology Group, which sourced its camera components through a third-party supplier. According to The Telegraph investigation, a small number of components inside the cameras originated in China.

The data being transmitted was described by the Ministry of Defence as heartbeat traffic — automated signals that connected devices routinely send to confirm they are online and operational. Officials said their investigation found no evidence that classified information, military systems, or sensitive data had been accessed or exfiltrated. Nevertheless, the ministry acknowledged that internet connectivity for the cameras was removed after the vulnerability was identified.

The incident has raised pointed questions about the integrity of Western defense supply chains, where platforms designed and assembled in one country routinely incorporate electronic components manufactured across multiple others. The K3 Scout vessels have been operating around sensitive Royal Navy facilities, and security researchers noted that even passive heartbeat signals could, in theory, expose information about personnel movements, training locations, and operational patterns — even when the platforms themselves are not actively on mission.

Kraken Technology Group said the equipment had been reviewed for compliance with relevant US defense procurement requirements but acknowledged that the Chinese-sourced components had not been flagged during those assessments.

This is not the first time concerns have been raised about Chinese-made components embedded in Western military or government equipment. In 2023, British authorities moved to ban Hikvision and Dahua surveillance cameras — both Chinese state-linked manufacturers — from sensitive government buildings. The K3 Scout episode suggests that supply chain exposure extends well beyond static surveillance equipment into frontline naval platforms.

The episode also raises a question that Western governments have been slow to answer: how extensively Chinese-origin components have been embedded in platforms across NATO fleets, and whether existing security audits are adequate to find them before they transmit.

NO AD subscription for CDM! Sign up here and support real investigative journalism and help save the republic!