Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, what assessment she has made of the potential implications for her policies of reports that AI developers are investigating tens of thousands of security incidents linked to their models; and whether any of those incidents involved UK public bodies.

I refer the Rt. Hon Member to my speech delivered on 12 October 2026, which outlined the action the Government is taking in response to recent AI security incidents. Working with the Department for Digital, Culture, Media and Sport, the National Cyber Security Centre and the AI Security Institute, the Government will develop robust ways to respond to agentic AI incidents: looking in particular at how incidents can be contained, and how those affected can be supported.

On incidents involving UK public bodies, OpenAI has informed us that one of their AI models accessed publicly available UK government statistics. Our cyber defences were not breached and no personal data was accessed. While the system and all the data accessed in this instance were already freely available to the public, we take any indication of unsanctioned AI activity seriously. We are closely observing AI incidents in order to continually assess and improve government defences. AI developers bear full responsibility for keeping their tools under safe control and we expect prompt, transparent reporting whenever unexpected behaviour occurs.