Royal Navy K3 Scout cameras transmit signals to China; MoD investigates vulnerability
United Kingdom

ANNA GORDON/Reuters
Source Analysis
What Happened
What Happened
Where Sources Agree
- arrows_inputCyber Vulnerability Assessment Findings: Coverage broadly notes that cameras on Royal Navy K3 Scout drones transmitted 'heartbeat' signals to a Chinese IP address, an issue discovered during a routine cyber vulnerability assessment that prompted the Ministry of Defence to disable internet connectivity on the affected devices.
- arrows_inputAudit Findings Confirmed: Coverage broadly notes that investigations by the Ministry of Defence and Kraken Technology Group found no evidence of compromised systems or sensitive data leaks, confirming that all identified vulnerabilities were subsequently closed.
- arrows_inputSecurity Breach Discovered: Sources align on the discovery that cameras on Royal Navy K3 Scout drones were transmitting routine 'heartbeat' signals to a Chinese IP address, noting the Ministry of Defence identified the issue during a routine cyber vulnerability assessment.
Where Sources Disagree
- arrows_outputFleet Cost Discrepancy: Some reports value the Royal Navy's K3 Scout fleet at approximately $16.2 million, while other accounts cite the cost as roughly £12 million.
- arrows_outputCamera Supplier Identification: Reports vary slightly regarding the origin of the camera components—some identifying the manufacturer as the Canadian firm Current Scientific Corporation, others referring only to an unnamed third-party supplier.
- arrows_outputOperational Unit Attribution: While some reports associate the K3 Scout fleet's deployment with the Special Boat Service headquarters, other accounts identify the Coastal Forces Squadron as the primary unit utilizing the vessels.
Timeline
August 10, 2026
Internet Cut; Investigations Completed: Following the discovery, internet connectivity was removed from the affected camera equipment and audits and reviews were launched; investigations reportedly found no evidence that MoD systems or sensitive data were accessed or transmitted externally. Kraken and joint Royal Navy audits said potential vulnerabilities were identified and closed, and the MoD maintained no sensitive information was compromised.
August 10, 2026
Heartbeat Signals Found To China: During a routine cyber vulnerability assessment (reported in August), the MoD discovered that cameras fitted to K3 Scout vessels were sending ‘heartbeat’ communications — simple online-status signals — to an IP address in China. The revelation was reported to have been identified after the fleet entered service and was flagged at Special Boat Service headquarters in Poole.
June 1, 2026
Wider Supply-Chain Scrutiny Grows: The incident intensified scrutiny of defence supply chains and the security of third‑party components, echoing concerns raised in the Strategic Defence Review published in June about reliance on dual‑use technologies and resilience to supply‑chain shocks. Officials and security experts warned that minor embedded hardware and software components can create vulnerabilities even in domestically assembled equipment.
Summaries by Ground AI
Sources
See All 45Most Written About
The stories getting the most coverage from the last 24 hours
Source Analysis
Timeline
August 10, 2026
Internet Cut; Investigations Completed: Following the discovery, internet connectivity was removed from the affected camera equipment and audits and reviews were launched; investigations reportedly found no evidence that MoD systems or sensitive data were accessed or transmitted externally. Kraken and joint Royal Navy audits said potential vulnerabilities were identified and closed, and the MoD maintained no sensitive information was compromised.
August 10, 2026
Heartbeat Signals Found To China: During a routine cyber vulnerability assessment (reported in August), the MoD discovered that cameras fitted to K3 Scout vessels were sending ‘heartbeat’ communications — simple online-status signals — to an IP address in China. The revelation was reported to have been identified after the fleet entered service and was flagged at Special Boat Service headquarters in Poole.
June 1, 2026
Wider Supply-Chain Scrutiny Grows: The incident intensified scrutiny of defence supply chains and the security of third‑party components, echoing concerns raised in the Strategic Defence Review published in June about reliance on dual‑use technologies and resilience to supply‑chain shocks. Officials and security experts warned that minor embedded hardware and software components can create vulnerabilities even in domestically assembled equipment.













