A British soldier who refused an order to remove his phone's SIM card before deploying to Estonia had the phone hacked, was blackmailed with stolen nude photos, and was then court-martialed.
An Estonian newspaper recently revealed the case. The soldier, Daniel Barton-Kennedy, was told to pull the SIM card before heading to a part of Estonia roughly 90 miles west of the Russian border. He did not. His phone was hacked, nude photos of him were taken, and the photos were used to blackmail him.
The military's response came down on the disobedience. Barton-Kennedy was court-martialed for disobeying a lawful command and pled guilty. He was reduced in rank and ordered to serve 10 months in detention.
The order he ignored is the kind of operational security (opsec) rule that looks like bureaucratic fussiness until it fails. A SIM card is what ties a phone to a cellular network, and a deployment near a Russian border is the setting where that tie is most likely to matter. Following the rule would have cost him mobile service for the length of the posting.
The outcome also shows how personal data and military risk overlap. Intimate photos on a personal phone are a private matter in a civilian life. For a deployed soldier, they became leverage held by whoever stole them. The charge, though, was not about the photos or the blackmail. It was about the refusal, and that is what carried the rank reduction and the 10 months.