Chinese-made camera parts on Royal Navy drones sent online “heartbeat” signals to an IP address in China, and the Ministry of Defence cut their internet access after a cyber check found the issue.
Quick Take
- The Ministry of Defence said a routine cyber vulnerability assessment found the problem.
- Officials said there was no evidence of compromised Ministry of Defence data or systems.
- The cameras were sending “heartbeat communications,” which are normal status pings.
- Kraken Technology Group said a full audit found no sensitive information left intended channels.
What the Ministry of Defence Says
The core facts are now clear. The Royal Navy’s K3 Scout unmanned surface vessels had camera components made in China, and those cameras were found sending “heartbeat communications” to an IP address in China. The Ministry of Defence said it removed internet connectivity from the cameras after the discovery. It also said a thorough investigation found no evidence that Ministry of Defence data or systems were accessed, compromised, or transmitted externally.
That distinction matters. A heartbeat signal usually means a device is online and working, not that it is sending pictures or mission files. The Telegraph report says the communications were described that way by investigators, and other coverage repeated the same point. For readers worried about military security, the problem is serious even if it does not equal a proven data leak. It shows how quickly a supply-chain flaw can turn into a national security concern.
Why the Supply Chain Raised Alarm
Kraken Technology Group said some third-party, National Defense Authorization Act-compliant cameras had a small number of parts from outside the United Kingdom. Kraken also said it and the Royal Navy completed a full audit and were confident no sensitive information had been shared outside intended channels. That statement supports the Ministry of Defence’s narrower finding, but it also shows how much trust modern defense gear places in outside suppliers. When military systems depend on outside parts, buyers need tighter screening and clearer records.
The reporting also says Kraken got the cameras from a third party that had given security assurances. That raises a familiar problem for defense procurement. A supplier can say a part is safe, but hidden network functions or unclear component origins can still create risk. The available reporting does not publish the underlying technical report, packet captures, or firmware analysis, so the public must rely on the Ministry of Defence’s account and the contractor’s audit summary.
What Is Still Unknown
The public record does not show the exact camera model, the full bill of materials, or the technical method used in the cyber assessment. It also does not say whether the heartbeat traffic carried any metadata beyond a simple online signal. That matters because even small bits of machine data can reveal patterns about use, timing, or location. The reports also leave one claim unresolved: whether some cameras stayed active while the vessels were switched off.
A spy camera equipped on the K3 Scout, a maritime drone boat used by the British Royal Marines and Royal Navy special forces, contained Chinese-made components that secretly transmitted information to China, the UK’s Daily…#China #ChinaMilitaryhttps://t.co/5LtXbYQbbf
— chinaspotlight (@chinaspotlight1) August 10, 2026
At this point, the strongest supported claim is not that sensitive British military data was stolen. It is that a defense platform used components with China-linked parts, and those parts created outbound traffic that triggered a security review. That is enough to justify caution, tighter procurement rules, and a hard look at supply-chain risk. It is not enough, based on the published record, to prove that classified data was transmitted to China.
