# UK government investment arm cops to 40-hour leak of officials’ contact details

- URL: https://talkfuse.com/story/uk-government-investment-arm-cops-to-40-hour-leak-of-officials-contact-details/
- Published: 2026-08-03T11:02:00+00:00
- Updated: 2026-08-03T11:12:55+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/08/03/uk-government-investment-arm-cops-to-40-hour-leak-of-officials-contact-details/5282213
- Topics: Government, Politics, UK, World

## Key points

- UKGI left 51 officials' names and emails publicly exposed for ~40 hours
- Breach blamed on staff not following security policy, voluntarily reported to ICO
- Key details, like where the file was hosted, remain undisclosed

## Summary

UK Government Investments (UKGI), the Treasury-owned body that advises ministers on major financial deals, has admitted that an employee's failure to follow security policy left an internal file containing officials' names and work email addresses publicly accessible for around 40 hours. The incident, disclosed in UKGI's annual report and first reported by The Guardian, is notable because UKGI handles sensitive, high-value government transactions, and the organisation has offered few details about the scale of any risk posed to affected staff.

The exposed document contained "high-level management information" plus the names and work email addresses of 51 officials, though UKGI has not said when the leak occurred, where the file was hosted, or whether it was accessed while exposed. The breach did not meet the threshold for mandatory reporting, but UKGI voluntarily notified the Information Commissioner's Office, informed its Audit and Risk Committee, and commissioned an external review, which found its response appropriate and recommended further security improvements, most of which have been implemented or are due soon. The lapse comes despite UKGI's involvement in major deals this year, including the sale of the government's remaining NatWest shares and advising on the Royal Mail takeover.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.
