British soldier court-martialed after phone security breach in Estonia

A British soldier faced a court-martial after failing to follow operational security protocols regarding his mobile phone while deployed in Estonia, according to Ars Technica.

Cpl. Daniel Barton-Kennedy, a member of the 1st Battalion of the Duke of Lancaster Regiment, ignored direct orders to remove his SIM card and disable location settings during Exercise Eastern Warrior in January 2026. Despite receiving multiple briefings on operational security, the soldier kept his device active.

Consequently, an unknown party accessed his phone, stole nude photographs and attempted to extort him for money. Barton-Kennedy initially paid 100 British pounds before reporting the incident to his platoon commander when the demand increased to 250 British pounds.

He later pleaded guilty to disobeying a lawful command, resulting in a reduction in rank and a 10-month detention sentence. While the soldier cited a desire to contact his family as his motivation for keeping the device active, his appeal was denied in August 2026.

A British Army spokesperson emphasized that security measures are critical for protecting personnel, noting that any breaches compromising operational safety will result in swift disciplinary action.

Source: Ars Technica

Written by

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.