Recommendation 7

At the end of July 2025, the Department estimated that it would resettle 7,355 people through the ARR scheme as a direct result of the February 2022 data breach. This included 1,531 ‘principals’ (initial applicants) 6 C&AG’s Report, para 8 7 C&AG’s Report, para 22 8 C&AG’s Report, paras 9, 10, 17 9 C&AG’s Report para 9, Q 1 10 Letter from the Treasury Officer of Accounts, 26 August 2025 8 and their family members.11 A further estimated 16,108 people who were affected by the data breach were eligible to be resettled through the ARAP scheme because they or a family member worked with the UK government in Afghanistan in exposed or meaningful roles.12 The Department is also reviewing some rejected applications from people in the Afghanistan special forces, and it estimated that these applications could result in a total of up to 27,278 people affected by the data breach being resettled in the UK.13