Bbc

UK Foreign Office Hacked; Chinese Group Suspected

First seen 19 Dec 2025, 11:02 UTC • Theguardian

+17 •37.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The UK Foreign Office was hacked in October, with government data reportedly stolen. Trade Minister Chris Bryant confirmed the breach and stated that the risk to individuals is considered low. Investigations are ongoing, and a Chinese-affiliated group is suspected of being behind the attack.

How this analysis works

Attack Flow

21 entities, 40 inferred relationships (STIX 2.1).

Threat Actor (5)

APT31
Storm 1849
Storm-1849
Storm 1949
UAT4356

Technique (1)

Data Breach

Campaign (1)

ArcaneDoor Attack

Organization (14)

British Library
Electoral Commission
Foreign, Commonwealth And Development Office
Foreign Office
Jaguar Land Rover
JLR
Marks and Spencer
Marks & Spencer
M&S
Tata Consultancy Services
UK Electoral Commission
UK Foreign Office
UK Government
UK Home Office

Relationships

APT31 uses Data Breach
Storm 1849 uses Data Breach
Storm-1849 uses Data Breach
Storm 1949 uses Data Breach
UAT4356 uses Data Breach
ArcaneDoor Attack attributed to APT31
ArcaneDoor Attack attributed to Storm 1849
ArcaneDoor Attack attributed to Storm-1849
ArcaneDoor Attack attributed to Storm 1949
ArcaneDoor Attack attributed to UAT4356
APT31 targets British Library
APT31 targets Electoral Commission
APT31 targets Foreign, Commonwealth And Development Office
APT31 targets Foreign Office
Storm 1849 targets British Library
Storm 1849 targets Electoral Commission
Storm 1849 targets Foreign, Commonwealth And Development Office
Storm 1849 targets Foreign Office
Storm-1849 targets British Library
Storm-1849 targets Electoral Commission
Storm-1849 targets Foreign, Commonwealth And Development Office
Storm-1849 targets Foreign Office
Storm 1949 targets British Library
Storm 1949 targets Electoral Commission
Storm 1949 targets Foreign, Commonwealth And Development Office
Storm 1949 targets Foreign Office
UAT4356 targets British Library
UAT4356 targets Electoral Commission
UAT4356 targets Foreign, Commonwealth And Development Office
UAT4356 targets Foreign Office
APT31 related to Jaguar Land Rover
APT31 related to JLR
APT31 related to Marks and Spencer
APT31 related to Marks & Spencer
APT31 related to M&S
APT31 related to Tata Consultancy Services
APT31 related to UK Electoral Commission
APT31 related to UK Foreign Office
APT31 related to UK Government
APT31 related to UK Home Office

Continue Reading

LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments Declassified Intelligence Highlights Electoral Vulnerabilities Amid Cyber Threats APT36's Ongoing Espionage Campaign Against Indian Government State-Sponsored Hackers Exploit Google's Gemini AI for Cyberattacks Rise in AI Model Theft and Misuse by Threat Actors

UK Foreign Office Hacked; Chinese Group Suspected

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading