Senior Associate James Broomhall has provided comment in Resilience Media on the recent cyber incident involving the defence contractor, Dodd Group, outlining the implications of one of Britain’s most significant recent cyber breaches.

Addressing the concerning rise of cyber-attacks targeting defence contractors, James said: “This latest incident involving the Dodd Group adds to a concerning trend of cyber-attacks targeting defence contractors. Just months ago, Inflite The Jet Centre Ltd suffered a breach that exposed the personal data of nearly 3,700 individuals, including Afghans resettled under the UK’s Afghan Relocations and Assistance Policy. These repeated failures suggest systemic weaknesses in how sensitive data is protected across the MoD’s supply chain.

He discussed the legal implications of such breaches, commenting: “From a legal standpoint, these breaches raise questions about compliance with UK GDPR, particularly around the duty to implement appropriate security measures and report breaches promptly. Contractors handling personal data on behalf of the government are considered data processors, and both they and the MoD, as the data controller, could face scrutiny from the Information Commissioner’s Office if safeguards were inadequate.“

James’ comments were published in Resilience Media, 20 October 2025.