UK Government Investments Breach Exposes 51 Officials’ Data - The Access-Control Lesson for Every UK SME
UK Government Investments, the Treasury body that manages taxpayer stakes in RBS/NatWest, Lloyds, Channel 4 and the Post Office, has admitted a staff member's mistake left an internal file with the names and work emails of 51 government officials publicly accessible for around 40 hours. The incident, disclosed in UKGI's 2026 annual report and escalated to the ICO, is a stark reminder that most breaches start with a simple misconfigured share or permission - exactly what Cyber Essentials controls and proper Microsoft 365 governance are designed to catch.
