A failure to take data protection seriously could cost lives. That includes those of people who’ve worked for Allied forces in Afghanistan, and in other theatres of conflict. In August 2025, The Guardian revealed that a cyber-attack on a contractor linked to the UK’s Ministry of Defence (MoD) „exposed the personal data of up to 3,700 people, including Afghans seeking refuge as part of the Afghan Relocations and Assistance Policy (ARAP),” according to multimedia journalist Faisal Ali. His