Royal Navy Drone Cameras Secretly Transmitted Surveillance Data to IP Address in China

For modern militaries, the most significant vulnerabilities often lie not in the weapons themselves, but in the sprawling, opaque supply chains that build them. The British Ministry of Defence has severed internet connectivity to a newly deployed fleet of Royal Navy surveillance drones after discovering that cameras mounted on the vessels were secretly transmitting data to an IP address in China.[1][2]

The equipment in question is the K3 Scout, an 8.4-meter uncrewed surface vessel (USV) manufactured by the UK-based Kraken Technology Group. The Royal Navy purchased a £12 million fleet of 20 drones in March as part of Project Beehive, an initiative designed to integrate autonomous systems with conventional warships. The vessels are operated by the Royal Marines and the elite Special Boat Service (SBS) for reconnaissance, logistics, and force protection.[3][4]

The transmissions were uncovered during a routine cyber vulnerability assessment. Investigators found that electro-optical and infrared cameras fitted to the drones contained Chinese-manufactured components. These components were automatically sending "heartbeat communications"—routine data packets used to confirm a device is powered on and functioning normally—to a server located in China.[5][7]

Defense officials moved quickly to contain the fallout, insisting that the transmissions were limited to operational status pings. A Ministry of Defence spokesperson stated that a thorough investigation found no evidence that sensitive military data, systems, or operational intelligence had been accessed, compromised, or transmitted externally.[1][6]

Kraken Technology Group, which recently secured a $49 million contract with U.S. Special Operations Command to develop similar vessels, stated that the cameras were procured from a third-party supplier. The company noted that the cameras were compliant with the U.S. National Defense Authorization Act (NDAA) and that the supplier had provided explicit security assurances. Following a joint audit with the Royal Navy, Kraken expressed confidence that no sensitive information had breached intended channels.[3][4]

Despite these assurances, the discovery has triggered significant alarm within the UK defense establishment. Defense sources indicated that the cameras remained active even when the drones were powered down, raising concerns that the equipment could have inadvertently monitored highly sensitive personnel or meetings at the SBS headquarters in Poole, Dorset.[1][2]

The timing of the vulnerability is particularly sensitive. The K3 Scout fleet had reportedly been earmarked for a planned British deployment to the Strait of Hormuz, a critical global energy chokepoint. The drones were intended to help secure freedom of navigation for commercial shipping in the Gulf region, making the integrity of their surveillance systems a paramount operational requirement.[1][4]

The incident underscores a persistent challenge for Western governments attempting to decouple critical infrastructure from Chinese technology. Following the 2020 ban on Huawei from the UK's 5G network and recent directives prohibiting Chinese-made electric vehicles at sensitive military sites, the drone camera breach highlights how deeply embedded foreign components remain within allied defense procurement networks.[2][5]