A security assessment of Royal Marines surveillance drones has uncovered potential vulnerabilities in their camera systems after Chinese-made camera components were found establishing unauthorised connections to servers located in China, according to reports.
The issue was detected during a routine cyber security evaluation of the K3 Scout drone fleet, operated by the Royal Marines. The drones, valued at around £12 million, are designed for reconnaissance and surveillance missions, including operations supporting elite commando units.
During the assessment, security analysts discovered that the camera systems fitted on the drones were making automated outbound connections to an internet address associated with a server in China. The cameras were reportedly transmitting small “heartbeat” signals, which are commonly used by connected devices to indicate that they are active and functioning.
Following the discovery, the UK Ministry of Defence (MoD) intervened and disabled internet connectivity for the camera systems to prevent any further communication with external servers.
The MoD stated that a detailed investigation found no evidence that classified information, defence networks or sensitive military data had been accessed, compromised or transmitted outside the United Kingdom.
However, the incident has raised concerns among defence experts over the risks associated with the use of commercially available electronic components in military equipment. Even limited data exchanges, such as device status information or metadata, could potentially provide insights into equipment activity, locations or operational patterns.
The K3 Scout drones were supplied by British defence company Kraken Technology Group, which reportedly sourced the optical equipment from a third-party supplier. The supplier had provided assurances regarding the security of the components before their integration into the drone systems.
The discovery has renewed debate over defence supply chain security, particularly as modern military platforms increasingly rely on commercially available technologies, sensors and communication systems. Experts have warned that components with hidden or unauthorised connectivity can create vulnerabilities if they are not thoroughly examined before deployment.
The Royal Marines’ K3 Scout drones have been operational since March and are intended for rapid maritime operations, including surveillance and reconnaissance missions. Their planned deployment in the Persian Gulf has increased attention on ensuring the security and reliability of their onboard systems.
The UK Ministry of Defence has initiated a broader review of components used across military equipment to identify any other systems that may have unauthorised internet connectivity or potential cyber vulnerabilities.
The incident comes amid wider concerns among Western nations regarding cyber threats, espionage risks and the security of defence technology supply chains. While British officials have maintained that no sensitive information was compromised, the episode highlights the growing challenge of securing military hardware in an increasingly connected battlefield environment.
