UK Government Faces Cybersecurity Risks from Lost Devices Worth £1.3m

In a troubling revelation, thousands of laptops, phones, and tablets belonging to the UK government have been reported lost or stolen, with a total estimated replacement cost exceeding £1.3 million annually. Freedom of Information requests have uncovered that 240 laptops and 125 phones went missing from the Department for Work and Pensions in 2024 alone, while the Ministry of Defence reported the loss of 103 laptops and 387 phones in the first five months of 2025. The Cabinet Office also recorded losses of 66 laptops and 124 phones during the same period, raising alarms about potential cybersecurity vulnerabilities across various government departments.

The implications of these losses are concerning, as cybersecurity experts warn that such incidents could create opportunities for hackers to infiltrate government systems, even if encryption measures are in place. Professor Alan Woodward, a cybersecurity expert at the University of Surrey, emphasized that the significant number of missing devices creates a large attack surface for malicious actors. He noted, "If 1% were system administrators who had their phones stolen, that’s enough to get in,” suggesting that even a single compromised device could jeopardize national security.

The Ministry of Defence has claimed to implement stringent policies and procedures to mitigate the risk of device theft, asserting that encryption ensures data protection and prevents unauthorized access to the defense network. Similarly, the Bank of England has stated that it prioritizes the security of its devices and data, maintaining that suitable protections are in place. However, experts like Nick Jackson, Chief Information Security Officer at Bitdefender, argue that the potential systemic risk posed by numerous lost devices should be taken more seriously, especially given the sensitive information contained within. Jackson pointed out that the greatest risk arises from mobile devices, which may hold authentication tokens granting access to critical government applications.

Moreover, the Department for Science, Innovation and Technology reported that 83 phones and 18 laptops were lost or stolen in the year leading up to May 2025, while the Home Office, responsible for policing, noted 147 missing devices with an estimated replacement cost exceeding £85,000. David Gee, Chief Marketing Officer of Cellebrite, a digital forensics firm, echoed the sentiment that missing devices from public sector departments pose a severe national security threat due to the sensitive data they contain. He stressed that protecting sensitive information in government agencies should be a top priority, highlighting the need for enhanced security measures to prevent further losses.

As the situation unfolds, the government has affirmed that it takes device security seriously, with all incidents of loss or theft subjected to investigation. Nonetheless, the growing number of reported losses raises significant concerns about the robustness of current cybersecurity protocols within the government. With the potential for hackers to exploit these vulnerabilities, experts are calling for a reevaluation of security practices to safeguard against future breaches. The trend of increasing device losses calls for urgent attention from policymakers to ensure that national security is not compromised by preventable incidents.