Skip to main content
Incident intelligence/SS-IR-002CASE FILE OPEN
Symbolic editorial illustration for SS-IR-002SERVANTSTACK // INCIDENT INTELLIGENCEFORENSIC IMAGE // VERIFIED FRAME
SS-IR-002 // INCIDENT REPORTAlleged

UK Post Office Horizon

Software Bug Convicts 900+ Innocent People

EXECUTIVE BRIEF

The UK Post Office deployed Fujitsu's Horizon IT system across 11,500 branches.

DATA & CYBER SECURITYSURVEILLANCE & POLICING
FAILURE CHAINTRACE COMPLETE
  1. 01TRIGGERThe UK Post Office deployed Fujitsu's Horizon IT system across 11,500 branches.
  2. 02MACHINE ACTIONOperational automation
  3. 03MISSING GATEPredeployment and update validation
  4. 04IMPACTFinancial harm
01 // INCIDENT SUMMARY

The short version

The UK Post Office deployed Fujitsu's Horizon IT system across 11,500 branches.

02 // KEY FACTS

Case telemetry

INCIDENT
SS-IR-002
DATE
1999-2015
SYSTEM
UK Post Office Horizon
LOCATION / SCOPE
United Kingdom
EVIDENCE
Alleged
AI ROLE
Operational automation
HARM
Financial harm
SOURCES
2 cited records
03ENTRY POINT // WHAT HAPPENED

The event

The UK Post Office deployed Fujitsu's Horizon IT system across 11,500 branches. The software contained accounting bugs that created phantom shortfalls in branch accounts - showing money missing that was never missing. When sub-postmasters reported the discrepancies, the Post Office assured them no one else was experiencing issues. Over 900 sub-postmasters were prosecuted for theft, fraud, and false accounting based on Horizon's faulty data. Some went to prison. Some lost their homes. Four people took their own lives.

04CAUSAL TRACE // AI'S ACTUAL ROLE

What the machine did

Horizon's automated accounting system was treated as infallible. The Post Office's legal team prosecuted sub-postmasters using Horizon data as the primary evidence, invoking a legal presumption that computer evidence is reliable. Fujitsu knew about bugs in the system - including remote access capabilities that could alter branch accounts - but did not disclose them. The system's output was trusted over hundreds of humans reporting the same problem.

Operational automationAutomation was a causal participant—not a decorative label for the system around it.
05BLAST RADIUS // CONSEQUENCES

Where the failure landed

Over 900 sub-postmasters wrongly convicted - the largest miscarriage of justice in British history. 4 suicides. Hundreds lost their homes, savings, and marriages. Many served prison sentences. The Post Office Horizon IT Inquiry is ongoing. Parliament passed the Post Office (Horizon System) Offences Act 2024, quashing all convictions. Fujitsu faces potential liability exceeding GBP 1 billion.

06 // EVIDENCE STATUS

Alleged

Claims reported in litigation or public allegations; not presented here as a final finding.

SOURCE RECORD UPDATED 2026-07-09

07 // SOURCE LEDGER

2 cited records

  1. 01
  2. 02
08CONTROL FAILURE // MISSING GOVERNANCE

Predeployment and update validation

The failure pattern in this case: Change reached production without sufficient validation.

09INTERVENTION POINT // HUMAN IN THE MIDDLE

The moment the path could change

A change owner validates provenance, blast radius, rollback readiness, and release evidence before deployment.

AI PROPOSES→HUMAN OWNS THE DECISION→SYSTEM EXECUTES
10CONTROL DEPLOYMENT // AUTHORITYGATE

Change validation · rollback readiness

AuthorityGate's framework requires that automated system outputs used as evidence in legal proceedings must be independently verified by a technical SME. When hundreds of users report the same discrepancy, that is a system signal - not mass criminality. The framework mandates pattern analysis of system-wide complaints before pursuing individual enforcement, and prohibits using automated output as sole evidence in proceedings.

RELEVANT KEYSTONE CONTROLUpdate ValidationHow vendor, application, firmware, and automated updates are intercepted and proven safe before deployment.
12 // THE ALTERNATIVE

Autonomy is a design choice.

See the operating model that keeps AI useful while preserving human authority at consequential moments.

Compare AgenticAI and AugmentedAI →