British soldier jailed for ignoring security orders before Estonian deployment

green and silver padlock on yellow surface — FlyD / Unsplash

A British Army private was sentenced to ten months of detention and demoted after a military court found him guilty of disobeying a lawful command. The soldier, Daniel Barton-Kennedy, failed to remove the SIM card from his mobile phone before deploying to Estonia, a violation that preceded a cyberattack on his device. The incident resulted in the theft of private nude photographs and a subsequent extortion scheme targeting the service member.

The breach of security protocol occurred during Exercise Eastern Warrior, a military exercise held in the Tapa region of Estonia in January 2026. The location is situated approximately 145 kilometers from the Russian border. Prior to the deployment, military authorities issued explicit instructions to all participating personnel. These orders required the removal of SIM cards from personal electronic devices, the disabling of location services, and the use of trusted virtual private networks to mitigate the risk of information leakage during operations. The security regulations were reiterated multiple times after the unit arrived in Estonia, but Barton-Kennedy did not comply with the directives.

On January 19, 2026, Barton-Kennedy reported to his platoon leader that he had received an extortion message from an unidentified individual. The attacker claimed to have accessed the nude photographs stored in the soldier's phone gallery and stated that they had identified his identity through social media. Barton-Kennedy initially paid 100 pounds to the extortionist. When the attacker demanded an additional 250 pounds, the soldier refused to pay further and reported the incident to his superiors. The identity of the hacker was not disclosed, and there is no evidence linking the extortion to state-sponsored cyber operations by Russia or any other nation.

During a military court hearing on July 30, Barton-Kennedy admitted to violating the command. He explained that he understood the security rules but requested the court to consider his personal circumstances. He stated that he wanted to use his phone to contact his daughter on her birthday and to maintain communication with his pregnant partner. In a written statement submitted to the court, he expressed shock at receiving the first extortion message and deep regret for the entire incident. He also noted that serving in the British Army had been one of the greatest honors of his life. The court sentenced him to ten months of detention and a reduction in rank. Barton-Kennedy appealed the decision, but the appeal was rejected in August 2026.

A British Army spokesperson stated that the security measures are designed to protect the physical safety of military personnel. The spokesperson emphasized that any violation that could endanger personal safety or the security of military operations will be dealt with swiftly. Personnel who violate these rules should expect to face severe disciplinary action.