An intern reaching the end of a placement of 12 months has admitted downloading info graded with this highest security classification, but claims that steps were taken to prevent compromise

A former employee of GCHQ has plead guilty to a criminal offence and acknowledged endangering national security after taking Top Secret-classified data home with him.

Hassan Arshaad, a 25-year-old man from Rochdale, previously worked for the intelligence agency as an intern. As he neared the end of his time there in August 2022, he is understood to have used his work-issued phone to download files from an office workstation considered Top Secret – the most sensitive grade in government’s security classification, which is applied to data which, if compromised, could cause loss of life or major consequences for national planning and government operations.

Having taken such information home, Arshaad is then reported to have transferred the data to a personal PC.

Appearing in the Old Bailey this week, the former GCHQ worker – who was offered an internship on a one-year secondment from studies at Manchester University – admitted breaching the Computer Misuse Act by undertaking an unauthorised act he was aware could result in “serious damage”.

Related content

• GCHQ seeks tech experts to secretly join boardroom set-up
• ‘Team captain for the UK’s cybersecurity’ – NCSC offers £200k in hunt for tech chief
• GCHQ seeks leader for ‘no ordinary IT department’

Having been released on bail – with conditions including a stipulation that he must not access the dark web – Arshaad will be sentenced on 13 June. Judge Mrs Justice McGowan warned him that me may face a prison sentence.

Having been arrested three years ago, Arshaad provided police with a prepared statement apologising for and explaining his actions – as well as acknowledging their  “stupidity”.

“I removed the data simply out of curiosity to further develop some of the changes I was unable to complete during the course of my placement,” he said. “I had intended to use my developments when I hopefully returned to my previous team.”

Arshaad added: “I’m sorry for my actions and I understand the stupidity of what I have done…. I understand the potential damage and risk when obtaining the data. I have accepted that I removed the data and the stupidity of doing so. I did take steps to ensure that the data was not compromised.”

As a result of a search of his computer in 2022, officers are also reported to have found two indecent images of a child – for which Arshaad was charged and plead guilty the following year.