Nigel Farage’s Russian hack claim ‘without any merit’, former NCSC chief says

Martin said there was a cross-party consensus that cyber-attacks on politicians were an attack on the “integrity of our political system, they are attacks on the country and on our national security”.

He said the onus was on Farage to report the matter to the appropriate authorities given the serious implications for the country and its democracy.

He said: “It would require a national government response of some kind, whether it’s further sanctions or the expulsion of diplomats, and so forth. But, as it stands, this is an entirely unsubstantiated claim.

“Who knows what may emerge in the future – of course I cannot say for certain that this didn’t happen and I will change my view if the facts change.

“But that’s true of most claims and the onus is on Mr Farage to provide at least some evidence that we should take this extremely disturbing claim seriously.

“But at this time, based on what he said to the Mail on Sunday, this is an entirely unsubstantiated claim and one without any merit.

“What he has described would not just be hacking by Russia, but what we call a hack-and-leak operation, which is a different thing.

“It is way more serious because it violates international norms, and it’s a direct intervention aimed at destabilising our democracy and our politics in a way that spying isn’t.”

He added: “An aspiring prime minister should treat it with the utmost seriousness and cooperate fully with the National Cyber Security Centre and any other relevant authority; otherwise you should not make these accusations, because they’re way too serious to just be bandied around.”

Martin questioned Reform UK’s claim that a “team of counter-espionage experts” hired by the party had concluded the hack was almost certainly ordered by Russia.

He said: “Let’s deconstruct that a bit. He hasn’t apparently gone to the authorities. Are the ‘counter-espionage’ experts a cybersecurity company with digital forensics capabilities – who are they? What work have they done? Do they exist? He should at least publish some technical evidence.

“To take one phone and say my phone, email and bank account has been hacked, and it’s got the imprint of the Russian state, that’s a hell of a technical leap to do that on the basis of a single device analysis.

“It is not impossible – but in most cases you’d have to do a lot more by way of a substantive provable investigation.”

Martin added that “Russians don’t leave a little flag on a device”.

“You need detailed technical evidence, some of which is sometimes not even available to the private sector,” he said. “That is why for an accusation of this magnitude the only right port of call is the British security services, and in this case, specifically the National Cyber Security Centre in GCHQ.”

Reform has been approached for comment.