The committee announced on Friday, November 28, 2025, that “Person A,” whose identity has not been disclosed, warned British officials after the data breach but was subsequently confronted with an emergency court order prohibiting him from speaking about or confirming the issue in any form.
Person A explained that in 2021, during the fall of Kabul, he participated in assisting former Afghan security personnel and their families, initially in administrative tasks and later in processing cases across a wide network of units.
He said the breach became evident when a family under his care came across sensitive information about themselves on Facebook anonymously.