British Royal Navy K3 Scout Drones Supporting Special Forces Found Communicating With China.

The British Royal Navy cut internet access to cameras aboard K3 Scout uncrewed surface vessels after investigators detected recurring communications with an IP address in China. The incident exposes a supply chain security risk inside a £12.3 million fleet being introduced for Royal Navy and Royal Marines operations.

The communications reportedly came from Chinese-origin components embedded in third-party cameras installed on the K3 Scout vessels and took the form of routine "heartbeat" signals indicating the equipment was online. The UK Ministry of Defence says no sensitive data or systems were accessed or transferred, and internet connectivity to the affected cameras was removed after the issue was identified.

Related News: UK's Royal Navy drops Kraken K3 Scout naval drone from A400M in world-first USV airdrop

K3 Scout uncrewed surface vessel displayed at DSEI 2025. The platform is operated by the Royal Navy and can be configured for surveillance, force protection, C4ISR, logistics and strike support missions.
(Picture source: Army Recognition)

The incident concerns a platform involved in the Royal Navy’s effort to accelerate the integration of uncrewed systems into frontline maritime operations. Under Project Beehive, the service is acquiring 20 Kraken-built vessels for operations, training and experimentation, to combine autonomous units with conventional warships. The program is also intended to provide an open-architecture testbed capable of integrating new sensors, payloads and mission systems. For the Royal Navy, the concept extends beyond automation to the deployment of relatively small and potentially attritable platforms forward without exposing higher-value crewed vessels to the same threats.

According to information published by The Telegraph on August 9, 2026, the investigation into the K3 Scout vessels identified automated communications sent to an IP address located in China. These heartbeat signals are normally used by connected equipment to report its operating status and confirm its presence on a network. The newspaper also reported that the vessels had been involved in preparatory activities related to potential future British missions in the Strait of Hormuz and had operated near facilities used by the Special Boat Service in Poole. Further concerns relate to reports that some cameras remained active while the vessels themselves were switched off.

The K3 Scout is an 8.4-meter-long uncrewed surface vessel with a beam of 1.93 meters, a draft of 0.8 meters and a maximum displacement of 2,500 kilograms. Its composite structure incorporates an inboard diesel powertrain connected to a stern drive. Kraken lists a maximum speed of 55 knots, a range of 650 nautical miles at 25 knots and mission-dependent endurance of up to 30 days. The vessel can carry a 600-kilogram payload. Its modular architecture allows mission-specific equipment to be installed without redesigning the basic platform, including optional electro-optical sensors, radar, sonar and user-defined C5ISR systems. The K3 Scout uses the Auterion operating system and provides open interfaces for autonomy, while its operating modes range from supervised autonomous navigation to remote piloting.

These characteristics explain why the camera issue extends beyond a conventional cybersecurity anomaly. A sensor installed aboard an uncrewed vessel does not necessarily operate as an isolated piece of equipment. It can form part of a broader intelligence and command architecture, observe personnel and infrastructure, record patterns of activity or transmit information to operators ashore or at sea. Even a limited outbound connection creates an unintended pathway that needs to be identified and controlled, particularly when the system operates near facilities used by special forces. The Telegraph also reported that some cameras may have remained active while the vessels were powered down, raising a separate issue concerning subsystem power management and the ability of certain commercial components to function independently of the main platform.

The K3 Scout can be configured for maritime forward screening, force protection, littoral C4ISR, infiltration and extraction support, resupply, casualty evacuation and maritime strike missions. Its payload architecture can also accommodate electronic warfare functions, off-board kinetic or non-kinetic effects and systems for detecting and defeating uncrewed aerial systems. Sensor fusion and onboard processing are intended to support real-time situational awareness, while autonomous navigation manages route keeping, collision avoidance and mission execution under human oversight. Kraken also envisages multiple K3 Scouts operating independently or as elements of a distributed fleet, including teamed multi-axis operations. Automated launch and recovery arrangements allow deployment from shore or sea-based infrastructure, while the platform is designed for movement by air, land or maritime transport.

The British response has so far focused on technical containment rather than withdrawing the vessels. The Ministry of Defence says a routine cyber vulnerability assessment identified the issue and that the subsequent investigation found no evidence of systems being compromised or data being exfiltrated. Kraken states that the cameras came from a third-party supplier and had been presented as compliant with US National Defense Authorization Act requirements, although a limited number of components originated outside the United Kingdom. The case nevertheless illustrates the limits of administrative compliance when security assurance also depends on detailed knowledge of component provenance, firmware behavior and network dependencies embedded within individual subsystems.

Western armed forces are accelerating the development of distributed autonomous fleets, open architectures and systems incorporating commercial components to reduce costs and shorten procurement cycles. At the same time, this approach increases exposure to globalized supply chains in which Chinese industry retains a major role. Sensors, processors or communications modules containing undocumented functions could create vulnerabilities affecting not only an individual platform but also multinational exercises, special forces infrastructure and shared command networks. The K3 Scout case therefore highlights a broader issue for NATO members: technological sovereignty in military systems depends not only on where a platform is designed or assembled, but also on the origin and control of its components, software and data flows.

Written By Erwan Halna du Fretay - Defense Analyst, Army Recognition Group
Erwan Halna du Fretay holds a Master’s degree in International Relations and has experience studying conflicts and global arms transfers. His research interests lie in Security and strategic studies, particularly the dynamics of the defense industry, the evolution of military technologies, and the strategic transformation of armed forces.