UK Ministry of Defence tightens supply chain rules after naval drones pinged China

The UK Ministry of Defence discovered that cameras aboard its newest fleet of naval drones contained Chinese-made components quietly transmitting signals to an IP address in China. The finding, uncovered during a routine cyber vulnerability assessment in mid-August 2026, has triggered a broad review of how foreign-sourced parts end up inside British military hardware.

No classified or operationally sensitive data was compromised, according to MoD officials. But the mere existence of an unauthorized communication channel between a Royal Marines vessel and a Chinese server is the kind of thing that keeps defense procurement officers awake at night.

What the cameras were doing

The components in question were embedded inside cameras fitted to the K3 Scout, an uncrewed surface vessel (USV) used for surveillance, force protection, and coastal operations. During a standard cyber check, analysts noticed the cameras were emitting what’s known as a “heartbeat” signal, a basic, periodic ping that verifies a device is online and reports its status back to a remote server.

That remote server happened to be located in China.

The MoD moved quickly once the issue was flagged, disabling internet connectivity on the affected cameras. Officials stressed that the heartbeat transmissions carried no mission data, no video feeds, no GPS coordinates.

The K3 Scout fleet and Project Beehive

The K3 Scout fleet consists of 20 high-speed modular USVs, acquired at a cost of roughly £12 million under a program called Project Beehive. The vessels were built by Kraken Technology Group, a UK defense contractor founded in 2020 that has positioned itself as a specialist in unmanned maritime systems.

The boats have been operational since March 2026, deployed by the Royal Marines’ 47 Commando and Coastal Forces Squadron.

Kraken didn’t manufacture the cameras itself. The company sourced them from a third-party supplier that had certified the components as meeting the necessary security standards. That certification, it turns out, didn’t catch the Chinese-made internals or their tendency to phone home.

A pattern, not an anomaly

This isn’t the first time Chinese components have surfaced in unexpected corners of UK defense infrastructure. Parliamentary inquiries in late 2025 raised alarms about Chinese-made drone technology being used at sensitive military sites across the country. Those discussions led to pledges of greater vigilance, but clearly the problem persisted long enough for compromised cameras to end up on operational naval vessels months later.

What the MoD is doing about it

Beyond the immediate fix of cutting internet access to the cameras, the MoD has committed to enhancing scrutiny across its entire supply chain, with particular focus on foreign-sourced components. The review will examine how certifications are granted, how deeply inspections probe into sub-component origins, and whether current testing protocols are robust enough to catch low-level communication behaviors like heartbeat signals.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.