#FactCheck -Social Media Claim of ICC’s One-Year Ban on Pakistan Cricket Is Misleading

Introduction

Military equipment used by elite special forces is supposed to be the most tightly secured hardware a country owns, the last place anyone would expect a hidden flaw in its parts supply chain to slip through undetected. Yet that is precisely where one surfaced this August, when The Telegraph, revealed that cameras fitted to the Royal Navy's K3 Scout surveillance drones, equipment used by Britain's Royal Marines and closely associated with the Special Boat Service, the United Kingdom's elite maritime special forces unit, had been secretly transmitting signals to an internet address inside China. The United Kingdom's Ministry of Defence stripped the affected cameras of all internet connectivity the moment the transmissions were discovered, and has spent the days since insisting no sensitive data actually left the country. That distinction, between what was taken and what was exposed, is where this incident becomes genuinely worth examining.

What was actually found, and what was not

The K3 Scout is an 8.4 metre uncrewed surface vessel built by Kraken Technology Group, a British defence manufacturer based in Fareham, Hampshire, capable of reaching 55 knots and remaining at sea for up to 30 days. The Royal Navy purchased roughly 20 of these vessels under Project Beehive, a £12 million programme designed to fold autonomous systems into frontline maritime operations quickly, and the Royal Marines' Coastal Forces Squadron and 47 Commando have operated the fleet since March 2026.

A routine cyber vulnerability assessment, not an external tip off or an adversarial intrusion, is what caught the problem. Investigators found the electro-optical and infrared cameras mounted on the vessels sending what the industry calls heartbeat communications, routine signals a connected device sends simply to confirm it is powered on and functioning, to an IP address located in China. Kraken did not manufacture the cameras in house; the company sourced them from a third party supplier that had reportedly given assurances about their security, assurances the heartbeat traffic now calls directly into question.

Every source, including the UK Ministry of Defence itself, confirms the cameras were sending signals to an IP address in China. What remains unconfirmed is which company actually manufactured the compromised camera components. Neither The Telegraph nor the Ministry of Defence has publicly named the specific camera manufacturer, and an unverified social media claim allegedly identifying a Canadian supplier has since been disputed by that company, with no confirmation from official sources tying it to the incident as of now.

Crucially, the UK Ministry of Defence has been consistent on one point across every statement it has issued: its investigation found no evidence that classified information, government systems, or mission critical data were accessed, compromised, or transmitted outside the country. That is a meaningful distinction, and one worth taking at face value rather than dismissing as reflexive reassurance, since heartbeat signals by design carry connectivity status rather than payload content. But security researchers who reviewed the case have been equally consistent in noting that even metadata this thin has value to a watching adversary. Knowing when and where a piece of specialised military hardware is powered on and actively connected can itself function as a targeting signal, revealing patterns of deployment, operational tempo, and geographic presence without a single classified file ever leaving the device.

Why this particular fleet matters

The timing sharpens the concern considerably. A defence source cited in reporting on the story indicated the K3 Scout fleet was being considered as part of a future British contribution to securing freedom of navigation in the Strait of Hormuz, where the United Kingdom has already deployed a warship amid discussions of a multinational security mission. Equipment destined for a contested, strategically sensitive waterway having any unexplained data path back to a systemic rival's territory is not a detail that stays confined to a procurement footnote. The vessels were also tested during a NATO exercise in the Baltic Sea in 2025, meaning any compromised telemetry pattern could theoretically have been observed by the very alliance partners Britain was demonstrating the technology to.

The deeper issue is structural rather than incidental. Modern military hardware, however elite the unit operating it, is rarely built end to end by a single trusted manufacturer. Cameras, sensors, chipsets, and firmware routinely pass through several tiers of suppliers before reaching a finished platform, and each tier is a potential point where the chain of custody and verification can quietly break down. Kraken's own assurances about its camera supplier illustrate exactly how that failure propagates: a manufacturer can act in good faith, rely on a vendor's word, and still end up fielding compromised hardware, because the vulnerability was never introduced at the assembly stage but several layers upstream, in components whose ultimate origin was never fully audited.

CyberPeace View | A wider principle worth naming

There is a broader ethical and legal frame worth applying here, one that extends beyond ordinary cybersecurity practice into the territory international humanitarian law occupies. The core distinction that law draws, between combatants and protected persons, between military objectives and civilian life, depends fundamentally on operators having accurate, uncompromised situational awareness. A surveillance platform is not merely a piece of hardware; it is the sensory apparatus through which decisions with real consequences for human life get made in contested environments. If the integrity of that apparatus cannot be guaranteed, the reliability of everything built on top of it, target verification, proportionality assessments, distinction between combatant and civilian, is quietly weakened at its foundation. This is not a claim that the K3 Scout breach itself caused harm; the Ministry of Defence's own findings suggest it did not. It is a reminder that supply chain integrity in military sensing equipment is not simply a procurement or cybersecurity concern sitting apart from the laws of armed conflict. It sits underneath them, because a compromised sensor is, in a very real sense, a compromised judgment further down the chain.

Where India fits into this story

India has been grappling with functionally the same problem for years, and its response offers a useful point of comparison. Reporting dating back to 2023 revealed that Indian defence officials had quietly barred domestic drone manufacturers from using components sourced from countries sharing a land border with India, an unmistakable, if unstated, reference to China, citing exactly the kind of vulnerability now playing out in Britain's fleet, compromised communication functions, cameras, and operating software capable of leaking intelligence. That policy has hardened considerably since. Earlier this year, the Ministry of Defence in New Delhi finalised a stringent framework requiring that drones procured from domestic manufacturers contain no Chinese origin components or electronics at all, and at least one major drone order was placed on hold after allegations surfaced that the supplier had used Chinese parts despite those restrictions.

The commercial consequence of that caution has been real and acknowledged openly by industry figures; sourcing components outside China raises costs, given that up to 70 percent of the global drone supply chain has historically run through Chinese manufacturing. But India appears to have concluded, well ahead of this particular British incident becoming public, that the cost of auditing and diversifying a supply chain is lower than the cost of fielding compromised sensing equipment inside sensitive military operations. Indian firms have responded by building propulsion, avionics, and camera systems in house specifically to close this gap, treating component provenance as a first order design question rather than an afterthought bolted on after a breach forces the issue. Seen from that vantage point, the K3 Scout episode reads less like a uniquely British failure and more like a case study in a risk India's own defence establishment had already priced in.

Lessons from the breach

A few conclusions follow fairly directly from how this incident unfolded. First, routine cyber vulnerability assessments work, and this case is arguably an argument for doing more of them, more often, rather than a sign that current practice failed; the breach was caught internally, before any confirmed operational harm occurred. Second, a manufacturer's own assurances about a component supplier are not a substitute for independent verification, since Kraken's good faith reliance on its camera vendor's word is precisely where this vulnerability slipped through. Third, and most durably, defence procurement increasingly needs to treat component provenance as inseparable from operational security, not as a compliance checkbox to be satisfied once at contract signing. India's multi-year pivot toward auditing and localising sensitive component supply chains, imperfect and costly as it has been, points toward the direction other defence establishments will likely be pushed in as more incidents like this one surface. The K3 Scout breach did not, on the evidence available, compromise a single mission. What it compromised was the assumption that hardware assurances alone are sufficient, and that assumption was never going to survive close scrutiny forever.

References

1. LBC, "Spy cameras on Navy drones used by UK's elite special forces sending signals to China as security fears grow." https://www.lbc.co.uk/article/royal-navy-spy-drones-sending-signals-to-china-5Hjdfpm_2/
2. Defence Blog, "Royal Navy naval drone cameras secretly sent data to China." https://defence-blog.com/royal-navy-naval-drone-cameras-secretly-sent-data-to-china/
3. The National Interest, "The Royal Navy's Spy Drones May Have Been Spying for China, Too." https://nationalinterest.org/blog/buzz/royal-navys-spy-drones-may-have-been-spying-for-china-too-sa-081026
4. Kyiv Post, "UK Navy Drone Camera Components Were Secretly Communicating With China." https://www.kyivpost.com/post/82061
5. The Defense News, "UK's Royal Navy K3 Scout Drone Cameras Found Sending Data to an IP Address in China." https://www.thedefensenews.com/UKs-Royal-Navy-K3-Scout-Drone-Cameras-Found-Sending-Data-to-an-IP-Address-in-China/
6. The Jerusalem Post, "UK drones sent data to China, raising US, European fears on Chinese components." https://www.jpost.com/international/article-905191
7. Firstpost, "UK military drones fitted with Chinese cameras found sending data to Beijing: Report." https://www.firstpost.com/world/uk-military-drones-fitted-with-chinese-cameras-found-sending-data-to-beijing-report-14037075.html
8. Firstpost, "UK deploys warship to West Asia amid plans for multinational Hormuz security mission." https://www.firstpost.com/world/uk-deploys-warship-to-west-asia-amid-plans-for-multinational-hormuz-security-mission-ws-e-14009471.html
9. Reuters via Inquirer.net, "India bars makers of military drones from using Chinese parts." https://newsinfo.inquirer.net/1813810/india-bars-makers-of-military-drones-from-using-chinese-parts
10. The Print, "Amid concerns about use of Chinese parts in drones, Army general urges industry to be transparent." https://theprint.in/defence/amid-concerns-about-use-of-chinese-parts-in-drones-army-general-urges-industry-to-be-transparent/2305866/
11. idrw.org, "India Unveils Drone Security Framework to Eliminate Chinese Components and Strengthen UAV Cyber Defences." https://idrw.org/india-unveils-drone-security-framework-to-eliminate-chinese-components-and-strengthen-uav-cyber-defences/
12. The Week, "The hidden weakness in India's military drones: Zen Technologies says it has fixed the Chinese problem." https://www.theweek.in/news/defence/2026/07/09/the-hidden-weakness-in-indias-military-drones-zen-technologies-says-it-has-fixed-the-chinese-problem.html

‍

Introduction

Taj Hotels Group is well known for its luxurious ambience and old-world grace and charm, blended with contemporary comforts and amenities for its guests or customers. But what can make all the netizens perplexed is the recent data breach incident which took place in Tata-owned Taj hotels. The hotel suffer from a data breach that compromises nearly 1.5 million customers' data which includes addresses, membership IDs, mobile numbers and other personally identifiable information, according to sources. This news was brought to light which raised concerns about the privacy and data protection of personal data of individuals. We are living in a space influenced by advanced technology and digital communication which throws a concern or challenge to secure the personal information of individuals. 

Unveiling the incident 

Tata-owned Taj Hotels group has suffered a data breach that compromise information of over 1.5 million customers, according to a news report. A bad actor or entity going by the name “Dnacookies” claimed data set contains data from the 2014-2020 period and has not been disclosed anywhere till now. Such personal data includes name, address, customer ID, mobile number and other personally identifiable information. This shows the risks or challenges of data protection and security. The incidents raise an alarm about the risks and vulnerabilities that might be faced even by the big corporate giants. The bad actor with the handle “Dnacookies” also demanded a ransom of a sum of about Rs 4.16 lakh from the Taj hotel group. In response to the incident, a spokesperson from the concerned hotel group said that we have been made aware of someone claiming possession of a limited data customer data set, which is non-sensitive in nature. Investigation is underway and relevant authorities have been notified about the incident.

‍A demand for ransom

The report from CNBC-TV18 clears that the bad actor not only purloined the data but also demanded around 4.16 lakh as a ransom for the database.  Along with this, the bad actor kept three conditions ahead. Firstly there has to be a middleman for a negotiable deal secondly the data cannot be split either the entire data has to be taken with the ransom demand or no data at all. Thirdly additional samples of data will not be provided. Further, the spokesperson of Indian Hotel Company Limited mentioned that they have been escalated with the fact that someone is claiming authority in a limited data set. The bad actor claimed that the database contains information from 2014- 2020 which has been kept confidential till now. The audacity of the bad actor went to such an extent that the sample containing one thousand rows of unique entries from the bad actor dataset was also provided by the bad actor as proof of the deed. This incident underlines the growing threat in cyberspace and the urgency for individuals, organizations or entities to priorities data security measures and maintain cyber resilience.

Personal Data on Stake

Such data is the personal information of the individuals and also constitutes the personal tastes and preferences of individuals which can be exploited. The biggest gush of winds the hotel and individuals face by such a data breach is not only the volume of data compromised but also the potential ways it can get misused and exploited against the hotel or its customers by cyber crooks. This paves the way for cybercriminals to put forward any demand knowing the sensitivity of the data. Followed by creating a dilemmatic situation for the affected entities to either accept the ransom demands or to stand against ransom. Since the risks are high, going ahead with any of these situations can have an adverse impact on the security of personal data. The organisation or entities holding the personal data need to make sure that data under their realm is well protected and secured.

While the organisation has to sail through the aftermath of this breach, such incidents also pose a challenge for the organisation to maintain the trust and reputation of the organization since these incidents question the cyber security posture of the organisation. It is suggested to be transparent with its stakeholders, and open about the vulnerabilities and steps taken against this. They should also discuss the amplified step added for safeguarding their customer's personal data. Since Taj is well known for its out-of-the-box luxury and for providing comfort to its customers it should take a step ahead to reinforce its digital infrastructure to ensure the security of data.

Digital Personal Data Protection Act, 2023

The newly enacted Digital Personal Data Act, 2023 put certain obligations on data fiduciaries to take reasonable measures to maintain the security of personal data. The Act also requires to inform about the data breach to the data protection board constituted under the Act. The Act aims to protect the individual's digital personal data. The Act casts certain obligations on data principals and data fiduciaries. The Act provides penalty upto 250 crores in case of a data breach. The Act aims to provide consent-based data collection techniques. The Act also establishes the Data Protection Board to ensure compliance with the provisions of the Act and address grievances. 

Conclusion

Data breach in such a big giant in the market serves as an alarming concern to be more cautious and proactively take precautionary measures to protect the security of data and compliance with data protection laws and regulations. We are living in an era where digital security is as important as the basic fundamental rights of an individual. Taj Hotels Group has actively taken steps to handle the aftermath of the data breach by informing the incident to law enforcement agencies and taking necessary steps.  It is also on our part to be more aware, and vigilant about our personal data. Entities need to ensure compliance and measures to protect personal data and overall ensure a true cyber-safe & digital environment.

References

https://www.moneycontrol.com/news/technology/taj-hotels-suffers-data-breach-exposes-information-of-1-5-million-customers-11801161.html

‍

For more than a century, cinema has evolved alongside technology. Sound transformed silent films, colour changed visual storytelling, computer-generated imagery expanded the limits of imagination, and streaming reshaped how audiences experience films. Each transformation brought uncertainty, but Artificial Intelligence represents a different kind of shift. It is not merely changing how films are made; it is beginning to challenge who, or what, gets to create and perform them.

This debate has moved from theory to reality with Tilly Norwood, an AI-generated performer created by Particle 6 through its AI talent division Xicoia. After months of discussion surrounding the role of artificial performers in entertainment, Norwood is now set to headline her own feature film, Misaligned which is a project that places artificial intelligence at the centre of both the production process and the story itself. The film is described as a comedy-drama following an AI character without a tangible existence. The story follows that, guided by another AI character, she begins developing ambitions, emotions, and a desire to understand what it means to become “human” The premise of the movie is intentionally self-reflective. An AI performer, whose very existence has raised questions about authenticity and creativity, will now portray a character experiencing those same conflicts.

‍

AI as storyteller?

‍

Using Artificial Intelligence in filmmaking is not recent, for years production studios have used technology for visual effects, editing assistance, restoration, recommendation systems, and production planning. The emergence of AI-generated performers, however, introduces a far more complex question, can AI replace the actors who are core to storytelling?

When Tilly was first introduced at the Zurich film festival in late 2025 by the Dutch producer Eline Van Der Velden, CEO and Founder of Particle 6,  introduced it as a hybrid model of film-making, where there are directors, producers, production team but a "synthetic performer" in the lead role and a comprehensive AI-experts team. Van Der Velden argued that human creativity was not being replaced but supplemented by AI.

This was not well received by the film community. Actors like Emily Blunt and SAG-AFTRA (the Screen Actors Guild- American Federation of Television and Radio Artists) a US labor organization representing roughly 160,000 professionals across the entertainment and media industries, including actors, performers, journalists, musicians, and voice actors, released a statement condemning this project with synthetic performer. They emphasised that ‘creativity is, and should remain, human-centered. The union is opposed to the replacement of human performers by synthetics.’ 

‍

The Question of Authenticity

‍

Acting has historically been understood as an interpretation of human experience. Performers bring personal histories, emotions, cultural backgrounds, and individual perspectives into their roles.  The criticism is that an AI actor does not exist in a tangible form and essentially has no real story or background of any kind. Particle 6 describes Tilly only as a twenty-something who lives in London and loves coffee which is a very shallow context and has no personality at all. The film is also set in the fictional "Tillyverse," not a real place and exists on some cloud system reinforcing the sense that there is no lived reality behind the character.

At their core, AI performers are outputs of generative systems rather than individuals with lived experience or personal artistic interpretation. These systems learn by identifying patterns from vast datasets and generating results based on existing material, which raises questions about whether such performances can be considered original creative expression at all. Tilly Norwood's music video ‘Taking the Lead’ illustrated this gap in practice, drawing attention to inconsistencies in natural emotion, visual continuity, and expression across scenes.

Human actors, by contrast, bring authenticity and emotional depth shaped by real experience and creative interpretation which are qualities that recognition and awards have traditionally been built around. If a performance is produced through algorithms trained on existing creative patterns, a fundamental question follows: what exactly is being celebrated, the technology, the final output, or the humans guiding the system?

‍

Creativity, Consent, and the Legal Grey Areas

‍

AI performers also raise significant questions about intellectual property, personality rights, consent, and compensation. Existing legal and contractual frameworks were primarily designed around human performers who are individuals who negotiate compensation, own aspects of their identity, and participate in the wider cultural ecosystem surrounding cinema. However, an AI actor challenges these traditional assumptions. If a digital performer does not possess legal personhood, creative ownership, or independent rights, questions emerge regarding who should receive recognition and financial benefits: the developers, production studios, directors, or the human creators involved in building the technology?

Also if a digital actor’s expressions, movements, or style are influenced by thousands of existing performers, determining ownership becomes complicated. Who controls an AI-generated performance? Who deserves credit? Should performers have rights over how their likeness, voice, or style influences future AI systems?

‍

Any advantages?

‍

The most significant advantage of AI-assisted filmmaking may lie in what it offers smaller production houses and independent creators. By reducing certain production costs, AI tools could let filmmakers with limited resources attempt ambitious ideas that were previously out of reach. Beyond this production advantage, however, the acceptance of AI performers themselves remains uncertain. Projects like Misaligned are therefore less a proven shift in cinema than an industry experiment testing how far technology can move into a traditionally human creative space.

‍

The Future of Cinema: Replacement or Reinvention?

‍

Every major technological transformation in cinema has created fears about what might be lost, yet cinema has consistently adapted by absorbing new technologies into its storytelling. AI may follow a similar path, but the stakes are different as it does not simply change the tools available to artists, it challenges the definitions of creativity, authorship, and performance itself.

Much of cinema's economic and cultural life is really built on the bond between audiences and actors. It's actors who drive ticket sales, build loyal fan followings, and become cultural figures in their own right, through interviews, public appearances, and the visible journey of training, struggle, and growth that shapes a career. An AI-generated performer can mimic parts of that celebrity image, but it can't actually show up for any of it the way a person can. Handing central creative roles to artificial personalities also raises a fairness question, especially at a time when so many human performers are already struggling to find work.

Whether audiences will really embrace fully synthetic performers as stand-ins for human actors is still an open question. Misaligned may end up being the first real test of that. Early reaction to Tilly Norwood has been largely critical within the industry and among audiences. How viewers respond to Misaligned itself will be an early test of whether that scepticism holds. 

Cinema has always found ways to absorb new technology, but AI is testing something deeper than the tools filmmakers use. As machines get better at telling human stories, the real challenge is making sure the human element behind those stories doesn't get lost.

‍

References

‍

• https://theprint.in/feature/tilly-norwood-tillyverse-misaligned-particle6-ai-actor/2980654/
• https://www.cbsnews.com/news/tilly-norwood-ai-generated-actor-feature-film/ 
• https://www.sagaftra.org/sag-aftra-statement-synthetic-performer
• https://www.hollywoodreporter.com/movies/movie-news/ai-actor-tilly-norwood-movie-debut-misaligned-1236638719/

‍

‍