{"id":724076,"date":"2026-08-02T07:52:10","date_gmt":"2026-08-02T07:52:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/724076\/"},"modified":"2026-08-02T07:52:10","modified_gmt":"2026-08-02T07:52:10","slug":"uks-state-investments-agency-hit-by-data-breach-investing","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/724076\/","title":{"rendered":"UK\u2019s state investments agency hit by data breach | Investing"},"content":{"rendered":"

The public body in charge of the UK\u2019s state investments has been pushed to improve its internal security after a data breach left \u201chigh-level management information\u201d publicly accessible for nearly two days.<\/p>\n

UK Government Investments (UKGI), the agency that manages the taxpayers\u2019 interest in a swathe of companies including Channel 4 and the Post Office, said the security failure also left more than 50 government officials\u2019 personal details exposed for nearly 40 hours.<\/p>\n

The state body, best known for managing government holdings in bailed-out lenders Royal Bank of Scotland and Lloyds after the 2008 financial crisis, blamed the breach on an unnamed staff member who it said failed to follow security rules.<\/p>\n

\u201cAn internal file containing high-level management information and the names and work email addresses of 51 government officials was publicly accessible for [about] 40 hours, following the actions of a member of staff who did not follow established information security policies,\u201d UKGI said in its annual report.<\/a><\/p>\n

It stopped short of divulging the date of the security failure but said it had been identified within the past financial year, after which it was escalated to board members and also to the UK\u2019s information watchdog, the Information Commissioner\u2019s Office.<\/p>\n

Bosses also hired external experts to review security protocols, who suggested the body \u201cstrengthen our controls and incident preparedness\u201d.<\/p>\n

\u201cThe overwhelming majority of which UKGI has since implemented or will be implementing in the coming months,\u201d UKGI said.<\/p>\n

The incident will be a wake-up call for public agencies, at a time when the rapid rise of AI has prompted fresh fears over how the frontier technology could exploit security gaps.<\/p>\n

Open AI recently said<\/a> that a rogue AI agent \u2013 an autonomous tool able to carry out sequences of commands without human help \u2013 had located and used logins to access four unnamed \u201cpublicly available services\u201d in addition to the US startup Hugging Face, a company that hosts a database of AI models<\/a>.<\/p>\n

skip past newsletter promotion<\/a>Free newsletter | Every weekday<\/p>\n

Sign up to Business Today<\/p>\n

Get set for the working day \u2013 we’ll point you to all the business news and analysis you need every morning<\/p>\n

\"\"<\/p>\n

Hugging Face said a human attacker could have found and exploited the same flaws, but the difference was the sheer scale of the agent\u2019s attempts to find a way through. \u201cAgents bring a steep increase in the number of paths an attacker can test, the speed at which failed paths can be replaced, and the volume of evidence defenders must interpret,\u201d it added.<\/p>\n","protected":false},"excerpt":{"rendered":"The public body in charge of the UK\u2019s state investments has been pushed to improve its internal security…\n","protected":false},"author":2,"featured_media":724077,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-724076","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/724076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=724076"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/724076\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/724077"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=724076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=724076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=724076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}