.jpg)
.svg)
A UK government agency responsible for managing state-owned investments has faced criticism after a data security breach left sensitive information publicly available for almost two days.
UK Government Investments (UKGI), which oversees government stakes in organizations such as Channel 4 and the Post Office, revealed that personal details of 51 government officials were exposed online for around 40 hours. The information included officials’ names, work email addresses, and internal management data.
According to UKGI, the breach happened because a staff member failed to follow established information security procedures. The agency said the exposed file contained high-level management information and remained accessible to the public until the issue was discovered and fixed.
Although UKGI did not disclose exactly when the incident occurred, it confirmed that the breach was identified during the last financial year. The matter was reported to the agency’s board and the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
Following the incident, UKGI brought in external cybersecurity experts to review its security systems and procedures. The review recommended stronger controls and improved preparation for future security incidents. The agency said most of these recommendations have already been implemented, while the remaining measures will be introduced in the coming months.
The breach has raised concerns about cybersecurity across public sector organizations, especially as advances in artificial intelligence (AI) continue to create new challenges. Experts warn that AI-powered tools could potentially take advantage of weaknesses in digital systems if proper safeguards are not in place.
UKGI is best known for managing government investments and previously handled state holdings in major banks such as Royal Bank of Scotland and Lloyds Banking Group following the 2008 financial crisis.
The incident serves as another reminder of the importance of strong cybersecurity measures to protect sensitive government information and personal data.
