UK digital ID plan sparks cybersecurity alarm as experts warn of data honeypot

Cybersecurity experts have blasted Prime Minister Keir Starmer's plan to make digital ID cards mandatory for every UK citizen, arguing the centralised 'Brit-Card' could become a magnet for hackers and criminals seeking to extort taxpayer money.

Under the plan, the Brit-Card would be stored in a government app and would include a person’s name, date of birth, a photograph, nationality, and residency status. The government says the card would verify a citizen’s right to work and help crack down on illegal working. Those starting a new job or seeking to rent a home would be required to show the digital ID, which would be checked against a central database of individuals entitled to live and work in the UK.

Critics warn that centralising identity data creates a single, high-value target for cyber criminals and nation-state actors. Chris Linnell, head of global data privacy at Bridewell, told the Daily Mail that the centralised database would be a tempting target and that data would be vulnerable to impersonation or fraud if breached. He said the digital ID’s inclusion of name, date of birth, nationality or residency status, and a photo could enable more sophisticated phishing if compromised.

Tech writer Andrew Orlowski warned of an "hacker attack of unparalleled proportions" and said an enemy could potentially hold the entire country to ransom, freezing state services and forcing concessions before Downing Street met hackers’ demands. Jake Moore, security advisor at ESET, said a breach at this scale could affect millions and stressed the need for strong encryption and diligent staff training.

Civil liberties advocates weighed in as well. Silkie Carlo, director of Big Brother Watch, called the system intrusive and a honeypot for hackers. Other experts — including Bournemouth University’s Andy Phippen and Surrey Centre for Cyber Security’s Steve Schneider — emphasized cybersecurity must be embedded in the design and that loss of personal data could lead to identity theft and fraud.

Public backlash has grown, with more than 500,000 people signing a petition opposing the plan and an open letter from Big Brother Watch urging the government to scrap it, arguing it would erode privacy and civil liberties and shift power toward the state. The letter warned that a nationwide digital ID could be exploited to monitor, track, and profile individuals.

Politically, reaction is mixed. Reform UK leader Nigel Farage criticized the plan on X, saying it would not stop small-boat crossings and would burden law-abiding Britons. Starmer — previously reported to be sceptical about civil liberties concerns — is said to have shifted toward backing the concept as part of a wider effort to crack down on illegal migration. Labour’s stance has framed the policy as a tool to reduce illegal working, though critics worry it would push undocumented workers further into the shadows and into more precarious living and working conditions.

Proponents argue the digital ID could prove a person’s right to live and work in Britain and simplify verification in hiring and renting. They also point to experiences in other countries with digital IDs, noting that several European and Asian nations have implemented forms of digital identification. Opponents, however, say the UK’s lack of a nationwide compulsory ID card reflects deep civil-liberties concerns, and warn that a centralized system could become a high-profile target for breaches.

Historically, the UK has faced debates over identity cards dating to Tony Blair’s 2000s push for compulsory IDs, which was ultimately scrapped, and to the wartime and postwar era when ID cards were used and later discarded. Details on the rollout timeline, enforcement penalties, and data-protection safeguards remain to be announced as the policy moves through consultation and potential legislation.