Russian hackers leak documents linked to eight UK military bases as MoD launches probe

In mid-October 2025, the Russian hacker group Lynx successfully breached the IT systems of UK defense contractor Dodd Group and another contractor, Kier. They stole sensitive internal documents related to eight UK military bases containing personal employee data and operational cybersecurity protocols. Among the leaked materials were schematics of RAF bases storing nuclear weapons and hosting U.S. F-35 fighter jets, details about the UK Ministry of Defence's primary drone base, an ultra-secret radar installation, and naval facility information. The hackers demanded a ransom, threatening to publish the data, some of which has already appeared on the dark web. The UK Ministry of Defence has confirmed the breach and is actively probing the incident. This breach is part of a pattern of data compromises at the UK MoD, including previous hacks exposing personal data of evacuated Afghans and British military personnel. The involved contractors have engaged forensic experts to contain and investigate the ransomware incident.