UK Government Investment Arm Admits to 40-Hour Data Leak of Officials' Contact Details
The UK Government Investments (UKGI), a corporate finance adviser to the UK government, has disclosed a data breach involving the exposure of an internal file containing the names and work email addresses of 51 government officials. This breach, which lasted approximately 40 hours, was due to an employee not adhering to established information security policies. The incident was reported in UKGI's annual report for the 2025-26 financial year. Although the breach did not meet the threshold for mandatory notification, UKGI voluntarily reported it to the UK's Information Commissioner's Office and informed its Audit and Risk Committee. An external review was commissioned to assess the breach, and recommendations for improving security controls and incident preparedness have been largely implemented. 
