F-35 parts diverted to Hong Kong: when chain of custody fails
A repair shipment ended up in the wrong jurisdiction
Australia confirmed on 22 September 2026 that unserviceable F-35 components sent from the country for repair in the United States had been diverted to Hong Kong. Defence Minister Richard Marles said Australia was working with US authorities and Lockheed Martin on the investigation. ABC reported that the shipment included a canopy incorporating radar-resistant technology and was carried by an intermediary. Marles nevertheless said his understanding was that no technologically sensitive equipment had been lost. The cause of the diversion, the present location of every component and any access by a third party have not been publicly confirmed.
The first failure is detecting the exception too late
A logistics label or manifest states the intended destination, but it does not continuously demonstrate where each component is. For controlled material, the physical unit — case, container or part — must remain bound to an identifier and independent telemetry. Location, movement, opening, light exposure, separation from the container and loss of signal can generate alerts when freight enters an unauthorised geofence, transfers to an incompatible flight or stops communicating. An alert does not prove criminal intent; it shortens the interval between divergence and intervention.
A destination change must become a new custody act
Legitimate rerouting is part of global logistics, but for critical components it cannot be a silent update in one isolated system. It should require strong identity, dual authorisation, a reason, timestamp, new destination, carrier and consignee confirmation. Every handoff — maintenance depot, forwarder, airline, customs and repair facility — should reconcile the person, organisation, component, seal and location. If the digital event says United States while the sensor says Hong Kong, the mismatch should block automatic acceptance and open an investigation.
Blockchain preserves the sequence; it does not replace physical control
A permissioned blockchain can anchor evidence of manifests, approvals, sensor readings and custody changes so later alterations become visible to authorised participants. The purpose is not to publish military data. Hashes, identities, versions and timestamps can be recorded while sensitive detail remains off-chain and access-controlled. Blockchain cannot determine by itself whether a sensor reading is true, and it cannot prevent diversion: authenticated devices, approval processes and an operational response are still required.
Five controls for critical shipments
- Identify every component and logistics unit, binding them to the sensor, seal, manifest and authorised destination.
- Apply route, airport and jurisdiction geofences, with alerts for diversion, opening, separation or abnormal silence.
- Require dual approval and out-of-band confirmation for every change of destination or carrier.
- Record every custody transfer with strong identity, time, location and counterparty acceptance.
- Anchor evidence and versions in a permissioned record while retaining raw data and clear response and recovery procedures.