MoD blunder leads to £7billion government cover-up of Taliban 'kill-list'

Exclusive

By EJ Ward

The government spent nearly two years using an unprecedented superinjunction to prevent the public from learning about a catastrophic Ministry of Defence data breach that exposed the personal details of thousands of Afghans who had worked with UK forces.

Listen to this article

Loading audio...

The breach, which happened under the previous Conservative government, involved the Afghan Relocations and Assistance Policy (ARAP) — a scheme set up to offer sanctuary in the UK to Afghans who supported British military operations during the 20-year war in Afghanistan.

More than 18,000 applicants were affected, with names and contact details, email addresses and phone numbers leaked. When family members are included, the number of people potentially put at risk rises to around 100,000.

The MoD sought and was granted a contra mundum superinjunction — a rare legal order that not only barred publication of the story but also prevented anyone from revealing that an injunction even existed. In court, it was described as “constitutionally unprecedented”.

The News Agents’ and LBC presenter Lewis Goodall was barred from reporting it and initially forbidden from even informing his editor. Court hearings were held in secret, with even media lawyers excluded from “closed sessions”.

Read more: How the UK silenced a scandal: My two year battle to reveal the truth by Lewis Goodall

The injunction was originally presented as a short-term emergency measure to protect lives while the government identified and helped those most at risk.

But subsequent hearings revealed that the number of people the MoD planned on assisting was just 200 individuals, plus their dependents — a fraction of those affected. Eventually, though there is some dispute about the figures, at least 6,900 people have now been brought over as a result of the breach.

Between 80,000 and 100,000 people, including the estimated number of family members of the Arap applicants, were affected by the breach and could be at risk of harassment, torture or death if the Taliban obtained their data, judges said in June 2024.

However an independent review, commissioned by the Government in January 2025, concluded last month that the dataset is “unlikely to significantly shift Taliban understanding of individuals who may be of interest to them”.

Around 4,500 people – made up of 900 Arap applicants and approximately 3,600 family members have been brought to the UK or are in transit so far through the Afghanistan Response Route.

A further estimated 600 people and their relatives are expected to be relocated before the scheme closes, with a total of around 6,900 people expected to be relocated by the end of the scheme.

The story, first reported today in a special episode of The News Agents podcast, shows how that secrecy was maintained far longer than journalists believed was necessary or justified.

The case has raised serious concerns about democratic accountability. Parliament was kept in the dark throughout, knowledge of the injunction was limited to only a handful of senior ministers including — the Prime Minister, the Defence Secretary, the then-Shadow Defence Secretary, and the Speaker of the House of Commons.

During private hearings, MoD officials admitted delays were caused by “a lack of ministerial decisions”. Evidence presented to the court suggested political considerations — such as pressure to reduce asylum hotel use — may have influenced who would receive help.

The superinjunction was finally lifted on Tuesday following a ruling by Mr Justice Chamberlain, who had earlier warned the secrecy had effectively put British democracy “into cold storage”.

Since then, the government has quietly shut down the ARAP scheme to new applicants. Charities have criticised the move as "shutting down a lifeline" for Afghans still living in fear of Taliban reprisals.

The MoD says that the cost of the 6,900 who have been brought over because of the data breach will be £800m. But submissions seen in court suggest the total cost of Afghan relocations could now be some £7 billion- much of which Parliament hasn’t had the opportunity to scrutinise.

Exclusive: Media gagged over MoD leak that put 100k Afghan allies at risk

Speaking in the Commons, Defence Secretary John Healey said the information leak "led to the High Court granting an unprecedented super injunction and the previous government establishing a secret Afghan resettlement route."

He went on to announce a change to government policy and a closure of the secret resettlement route.

"It is unprecedented, and to be clear, the court has always recognised the parliamentary privilege of proceedings in this House, and ministers decided not to tell parliamentarians at an earlier stage about the data incident as the widespread publicity would increase the risk of the Taliban obtaining the data set, Mr Healey said.

Adding "as parliamentarians and as government ministers, it has been deeply uncomfortable to be constrained from reporting to this Hous,e and I'm grateful today to be able to disclose the details to Parliament."

Reading a summary of his judgment in court, Mr Justice Chamberlain noted that the grant of the superinjunction had "given rise to serious free speech concerns".

He added: "The superinjunction had the effect of completely shutting down the ordinary mechanisms of accountability which operate in a democracy.

"This led to what I describe as a 'scrutiny vacuum'."

Although the injunction has ended, much of the case remains secret. Journalists involved say it highlights deep concerns about unchecked executive power, press freedom, and how easily transparency can be suspended — even in the UK.

This is not the first time the MoD has faced criticism over the handling of sensitive data under the ARAP scheme.

In 2023, just two years after the Taliban takeover, the Information Commissioner’s Office fined the department £350,000 for a separate data breach. Officials had used the 'To' field instead of blind carbon copy (BCC) in a mass email to 265 ARAP applicants, revealing their addresses — and in some cases, profile photos — to each other. Two recipients accidentally replied to the entire list, with one disclosing their location.

The ICO found the MoD had failed to put basic safeguards in place, leaving sensitive personal data at risk. Its investigation revealed that no specific procedures or guidance had been issued to staff working on ARAP at the time.