upvote
It wasn't a hack. The company used an external AI service.

ETA: They didn't ship data off to e.g. ChatGPT. They hired a subcontractor to build them a secure AI service.

Details in this comment:

https://news.ycombinator.com/item?id=47035141

leading to this:

https://endaleahy.substack.com/p/what-the-minister-said

The government is behaving disgracefully.

reply
Per the Minister herself, this matter wasn't important enough to refer to the ICO, who are the correct people to deal with data breaches.
reply
I've had to deal with the ICO over some pretty minor local government stuff, the bar for reporting to them is very low. I smell a coverup.
reply
> but it would seem better to fix the issue

They don't have a budget for that. And besides, it might be an externalized service, because self hosting is so 90s.

reply
That's the dumbest possible response to this.
reply