UK Government Investments agency exposed staff emails after security lapse

UK Government Investments, the public body that oversees the state's stakes in companies such as Channel 4 and the Post Office, revealed that an internal document containing senior management data and the names and work emails of 51 government officials was exposed to the public for about 40 hours. The agency attributed the lapse to a staff member’s failure to adhere to information-security policies and notified the UK Information Commissioner’s Office after the issue was discovered in the previous financial year.

The incident was escalated to the board, prompting the hiring of external security experts who advised strengthening controls and incident preparedness. UKGI has since applied most of the suggested measures and plans to roll out additional safeguards in the coming months. The breach highlights growing concerns about how emerging AI tools could exploit similar vulnerabilities, as recent reports show autonomous agents probing public services for login credentials.