Spies are supposed to keep secrets — not leak them. Yet that is exactly what happened aboard the U.K. Royal Navy’s fleet of K3 Scout surveillance drones, whose cameras were caught quietly shipping data back to China.
According to a report by The Telegraph of London, the cameras fitted to the K3 Scout drones were found sending information to a system or device located in China. The catch? Those cameras contained Chinese-made components — and someone on the other end was apparently listening.
The U.K. Ministry of Defence (MoD) was forced to strip the drones of their internet connectivity after discovering that data was being funnelled to a Chinese IP address. The problem surfaced during what the MoD describes as a “routine cyber vulnerability assessment.”
Before anyone pictures classified reconnaissance footage streaming to Beijing, the MoD is keen to downplay the leak. A spokesperson told The Telegraph that a thorough investigation found “no evidence of MoD data or systems being accessed, compromised or transmitted externally.” The transmissions, it turns out, were so-called “heartbeat communications” — the digital equivalent of a device raising its hand to confirm it is switched on and working normally for whoever happens to be monitoring it.
Reassuring or not, the heartbeat was beating in the wrong direction.
These are not hobbyist quadcopters. The Royal Navy bought 20 K3 Scout drones — a fleet costing £12 million — under its Operation Beehive project, tasking them with surveillance and force protection. On paper the K3 Scout is a serious machine, capable of hauling a 600kg payload and staying aloft for up to 30 days. The Royal Marines have been operating them since March 2026, with the drones sourced from a third party by British defence contractor Kraken Technology Group.
The wider worry has less to do with heartbeats and more to do with supply chains. If a Chinese-made camera component can chatter home from a special-forces drone, what else might be listening inside Western defence hardware? U.K. officials have spent years warning about the security risks of Chinese-made technology and its potential to gather intelligence on military capabilities.
The timing does the story no favours. Across the Atlantic, the U.S. Federal Communications Commission is weighing an expansion of its existing restrictions on new DJI drones to cover models already on the market, citing a desire to “secure the drone supply chain” against gear equipped with military technology. Lawmakers from both major U.S. parties have questioned whether DJI could hand data to the Chinese government, though no public evidence has been produced. DJI, for its part, denies sharing user data with Beijing and says it stores that data in the U.S.
For now, the K3 Scouts fly offline. The cameras still watch — they just no longer whisper.
