The Office for Budget Responsibility (OBR) leak of Chancellor Rachel Reeves’s Budget was accessed almost 25,000 times before its official publication.
The National Cyber Security Centre (NCSC) investigation found official forecasts by the OBR were downloaded “At least 24,701 occasions in the hour before Reeves delivered her Budget on November 26.
An initial review had claimed there were just 43 downloads. The NCSC report shows it was much bigger than that?
The NCSC has agreed with the OBR that early access of the Budget was due to a technical misconfiguration in the OBR’s web publication process. The investigation also agreed that the same misconfiguration enabled early access to the March 2025 report too!



