This UK government agency has suffered a data breach
What's the story
The UK Government Investments (UKGI), the public body responsible for managing state investments in companies such as Channel 4 and the Post Office, has suffered a data breach. The incident exposed "high-level management information" and personal details of over 50 government officials for nearly two days. The security lapse has prompted UKGI to step up its internal security measures.
Human error
Breach caused by employee not following security policies
The data breach was caused by an unnamed UKGI employee who allegedly failed to adhere to established information security policies.
The agency revealed in its annual report that an internal file containing high-level management information and the names and work email addresses of 51 government officials, was publicly accessible for about 40 hours due to this lapse.
Reporting the incident
Incident reported to board members, ICO
While UKGI did not disclose the exact date of this security failure, it said that the incident was reported to board members and the UK's information watchdog, the Information Commissioner's Office (ICO).
The agency has also enlisted external experts to review its security protocols after this breach.
These experts have recommended that UKGI "strengthen controls and incident preparedness."
Future plans
External experts recommend security measures
UKGI has said that it will implement most of the security measures recommended by external experts in the coming months.
This incident serves as a wake-up call for public agencies, especially amid growing concerns over AI's potential to exploit security gaps.
The breach highlights the need for improved cybersecurity measures in public sector organizations.