On Monday, the United Kingdom leveled accusations against cyber organizations affiliated with the Chinese state, citing their involvement in at least two cyber campaigns deemed "malicious" and "reprehensible," targeting both Britain's voter data and its parliamentarians.
During a statement delivered in the House of Commons, the government disclosed findings from the UK’s National Cyber Security Centre (NCSC), a branch of the Government Communications Headquarters (GCHQ), asserting that the Electoral Commission systems were likely compromised by a Chinese entity between 2021 and 2022.
Additionally, the NCSC stated with high confidence that APT31, a group associated with the Chinese state, engaged in reconnaissance activities against British parliamentarians during a distinct campaign in 2021. Although these attacks aimed to disrupt UK democracy and politics, they were ultimately unsuccessful. However, in response, two individuals and one company linked to APT31 have faced sanctions.
Oliver Dowden, the UK Deputy Prime Minister, emphasized that the UK remains resolute against cyber threats to its democratic institutions. He highlighted the government's commitment to safeguarding democratic principles and values, stating, "The UK will not tolerate malicious cyber activity targeting our democratic institutions."
Dowden also underscored the global significance of such cyber operations, noting, "I hope this statement helps to build wider awareness of how politicians and those involved in our democratic processes around the world are being targeted by state-sponsored cyber operations."
The government assured that despite these cyber intrusions, electoral processes remained unaffected, and the rights of the UK electorate were preserved. Measures have since been implemented by the Electoral Commission to fortify its systems against similar breaches in the future.
Foreign Secretary David Cameron condemned China's attempts to interfere with UK democracy, affirming that such actions are unacceptable. He stressed the importance of transparency in exposing threats faced by democratic systems globally.
Although most targeted UK parliamentarians were those critical of China's activities, the Foreign, Commonwealth and Development Office (FCDO) confirmed that no parliamentary accounts were successfully breached.
Home Secretary James Cleverly condemned China's targeting of democratic institutions, asserting that the UK's robust security measures, including the National Security Act, make it increasingly challenging for adversaries to succeed in such endeavors.
The UK's stance has garnered support from its allies in the Five Eyes alliance, including Australia, Canada, New Zealand, and the United States. The British government urged the international community to hold China accountable for its cyber actions and welcomed solidarity from across the Indo-Pacific and Europe.
In response to the threats posed by cyber activities, the NCSC has provided guidance to high-risk individuals, including parliamentarians, to enhance their resilience against cyber threats. Additionally, the UK's Elections Act 2022 has clarified electoral offences, ensuring better protection for voters from undue influences, with such offences falling within the purview of the Online Safety Act's illegal safety duties.
Through these measures, the UK remains committed to upholding democracy and the rule of law, standing firm against attempts to undermine its electoral processes and democratic institutions.
