Cameras installed on the Royal Navy’s new fleet of uncrewed surface vessels have been found to transmit data signals to an IP address in China, prompting scrutiny over potential security vulnerabilities in military equipment. The £12 million K3 Scout drone boats, operated from the Special Boat Service base in Poole since March, were discovered sending routine “heartbeat” signals as part of a cyber vulnerability assessment. Despite initial concerns, the UK Ministry of Defence (MoD) reported no evidence that any sensitive data or systems had been accessed or compromised.

The vessels were supplied by the British defence contractor Kraken Technology Group, which sourced the cameras from a third-party manufacturer that had assured the MoD of their security protocols. While the data transmitted consisted only of status signals confirming the cameras were active, experts warn that even minimal data can be exploited if aggregated extensively. Such transmissions can reveal operational patterns, locations, and behaviors, information that adversaries may leverage for intelligence purposes.

Lee Hannaford, director of defence, national security, and intelligence consultancy Larkspur International, emphasized that many Chinese-manufactured components—including cameras and Internet of Things (IoT) modules—are designed to maintain continuous digital connectivity with parent organizations. These communication channels can potentially be used for data collection, remote control, or preparing for disruptive actions. He noted that encryption alone does not eliminate these risks.

Despite the finding, officials and analysts argue that the incident should not hinder the Royal Navy’s ongoing development and deployment of uncrewed systems. Hannaford highlighted the importance of improving security questions during the design and procurement phases, focusing on identifying where devices connect and transmit data. He cautioned against implementing lengthy delays in acquisition processes, citing Ukraine’s rapid adaptation and patching of uncrewed systems as a model for effective response.

The broader concern stems from China’s 2017 National Intelligence Law, which mandates that all organizations and citizens assist state intelligence activities, without exception. This legal framework raises alarms about the inherent risks in Chinese technology being integrated into Western military systems. Murray Scot Tanner, a China scholar, characterized the law as shifting obligations from defense to active intelligence offenses.

The MoD has faced similar challenges in the past, including warnings issued about Chinese-built MG electric vehicles leased by the department, which require restrictions on connecting sensitive devices or discussing confidential matters within them.

While the Kraken drone camera incident may be minor in itself, it underscores a persistent and growing challenge: the exploitation of seemingly innocuous data by state actors. Analysts stress the need for a cultural shift toward heightened security awareness and a “friendly suspicion” approach in safeguarding military technology, balancing the demands of global trade with secure defense capabilities.