Overview
- Defense officials confirmed an active investigation after reports that hundreds of documents tied to eight UK military sites were posted on the dark web.
- Dodd Group said a ransomware incident gave an unauthorized party temporary access to part of its systems and that forensic work is under way.
- Reporting says the breach began on September 23 and that hackers have released two of four planned data dumps so far.
- Leaked materials reportedly include about 1,000 files such as visitor records, internal security guidance, and contact details for contractors and MoD personnel.
- Outlets attribute the operation to the Russia‑linked group Lynx, though UK authorities have not publicly confirmed responsibility.