An Estonian newspaper recently revealed that a British soldier disobeyed a direct order to remove the SIM card from his cellphone before being deployed to a part of Estonia, approximately 90 miles west of the Russian border.
As a result of his refusal to engage in this element of operational security (opsec), the soldier, Daniel Barton-Kennedy, had his phone hacked, and nude photos of himself were stolen and used as blackmail against him.
Eventually, Barton-Kennedy was court-martialed for disobeying a lawful command, pled guilty, was reduced in rank, and ordered to serve 10 months in detention.
According to a 21-page British appeals court document shared with Ars Technica by Eesti Ekspress, the Estonian newspaper that first reported on this saga, the story begins in January 2026.
At the time, Barton-Kennedy was a corporal, with over seven years of service, serving in the 1st Battalion of the Duke of Lancaster Regiment of the British Army.
His unit was deployed to participate in “Exercise Eastern Warrior” in Tapa, Estonia, roughly halfway between Tallinn, the capital city, and the Estonia-Russia border.
While in the United Kingdom, on January 7, Barton-Kennedy, along with other members of his unit, were briefed on their orders and given specific instructions to “remove SIM cards and switch off location settings and to use a trusted virtual private network on all personal electronic devices.”
Once the unit arrived in Estonia, days later, they were given further briefings and reminders of this policy. Despite this, Barton-Kennedy ignored the instruction.
On January 19, Barton-Kennedy informed his platoon commander that he had received a message “from an unknown party who had acquired nude photographs of him from the photo section of his mobile phone and had identified him on social media.”
Barton-Kennedy initially acquiesced to paying the attacker 100 British pounds ($133) but balked when he was asked to pay 250 British pounds ($333), and only then informed his platoon commander what had happened.
Eventually, Barton-Kennedy was court-martialed and pled guilty at a hearing on July 30.
During that process, according to the court filing, Barton-Kennedy understood the orders that were given to him at the time, but asked the court to “consider the personal circumstances” that he faced at the time. Without his phone, he told the court, he could not reach his daughter on her birthday, nor his pregnant partner.
In a written statement, Barton-Kennedy said he was stunned when he received the first blackmail message.
“Despite still being in a state of shock and uncertainty, I recognised that I had a duty to report the compromise without any further delay,” he wrote.
Additionally, he said that he “deeply regrets” the incident and added that serving in the British Army “has been one of the greatest privileges of my life.”
Barton-Kennedy appealed the sentence, which was denied in August 2026.
In response to an inquiry for comment, Lt. Col. EP Mackie, a British Army spokesperson, told Ars in a statement that the security measures imposed are meant to protect the safety of military personnel.
“Any breaches of Army security measures that might compromise personal safeguarding or operational security will be dealt with swiftly, and offending personnel can expect uncompromising disciplinary action,” he wrote.
Source: arstechnica.com
