Thousands of pages of sensitive information including armed forces sales, cyber defences and layouts of barracks were stolen by LockBit – one of the most prolific ransomware groups.
Last month it targeted the databases of Zaun, a UK company that builds security fencing for high-profile clients.
LobBit then shared the stolen data on the dark web – that included sales orders bought for HMNB Clyde.
The base is also known as Faslane -which is home to the nation’s nuclear deterrent, and for GCHQ, the UK’s intelligence, security and cyber agency.
Details on security equipment at RAF Waddington, where the Reaper attack drones squadron is held, and Cawdor Barracks, whose 14th Signal Regiment deals in electronic warfare.
Comprehensive drawings for the perimeter fencing at the barracks were attached in company emails, as well as a map charting installations at the site.
Information from high-security prisons – including Category A Long Lartin and Whitemoor – and science and defence technology hub Porton Down were also compromised.
The chair of Commons Defence Select Committee questioned the threat the leak posed to UK defence and what needed to be done to tackle it.
Conservative MP Tobias Ellwood said: ‘How does this affect the ability of our defence establishments to continue functioning without threat of attack?
‘How do we better defend ourselves from Russian-backed interference no doubt related to our stance in supporting Ukraine? Finally, this is another example of how conflict is no longer limited to the traditional battlefield, it now includes the digital domain and is placing ever greater demands on security apparatus.’
Labour MP Kevan Jones, who also sits on the committee, called on the government for an explanation for the leak which he described as ‘potentially very damaging’.
Zaun told The Mirror: ‘LockBit will have potentially gained access to some historic emails, orders, drawings and project files. We do not believe classified documents were stored on the system or have been compromised.
‘The National Cyber Security Centre has been contacted and we are taking advice. Zaun is a victim of a sophisticated cyber attack and has taken all reasonable measures to mitigate any attack on our systems.’
A government spokesperson said: ‘We do not comment on security matters.’News Source: Metro