PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchSage briefly took its early-access Copilot assistant offline in January 2025 after it reportedly returned information from other customers’ accounts in response to an invoice query. Sage said unrelated business information was shown to a very small number of customers, but that no invoices were exposed. The company has not published an exact count or a technical explanation of the fault.
What happened with Sage Copilot?
On 20 January 2025, The Register reported that a customer asking Sage Copilot for a list of recent invoices received information drawn from other customer accounts, including the customer’s own. The issue was reported to support and verified. Sage then suspended Copilot for several hours while it investigated and implemented a fix.
As an Amazon Associate I earn from qualifying purchases.
Sage’s spokesperson described it as a minor issue involving a small number of customers. The company said unrelated business information appeared to a very small number of customers and stated: “At no point were any invoices exposed.” Sage also said the fix was fully implemented and Copilot was performing as expected.
Did Sage Copilot expose another customer’s invoices?
The available reporting describes cross-account information appearing in response to an invoice-related query; it does not establish that invoice files or invoice contents were exposed. Sage explicitly denied that any invoices were exposed. That distinction matters, but the public account does not provide enough technical detail to independently determine precisely what information the system could access during the incident.
What is known—and what remains unclear
What Sage and the reporting establish
- The issue occurred in Sage Copilot, an invitation-only early-access product used by a small, unspecified number of customers at the time.
- Sage temporarily paused the assistant, investigated the report and said it implemented a fix.
- Sage characterized the displayed information as unrelated business information and the affected customer group as very small.
What has not been established publicly
- The exact number of affected customers.
- The technical component or root cause that allowed information from different accounts to appear together.
- Whether a regulator was notified, whether an independent audit followed, or whether invoice content was technically accessible despite Sage’s denial.
These details should be treated as unknown; the public statements do not support a more specific conclusion.
Why tenant isolation matters in accounting AI
Accounting assistants may work with tax rules, profitability, cash flow, overdue payments, customer activity and receipt or invoice processing. Sage’s 27 January 2025 release describes those kinds of Copilot functions. An assistant handling such workflows needs to keep each customer’s records within the right account context and enforce authorization before returning information.
This incident is a reminder that an AI answer can be a security issue even when a company says invoice files were not exposed. The relevant question is whether the system can retrieve or display another tenant’s information, and whether access controls prevent that across ordinary queries as well as edge cases.
Recommended Free Tools
How to evaluate tenant isolation in an AI accounting tool
Before adopting an accounting assistant, ask the vendor for specific evidence about how it separates customer data and handles access. A useful review should cover:
- Tenant isolation and authorization: How is customer context partitioned, and what checks ensure a prompt cannot retrieve another tenant’s records?
- Testing: Are cross-tenant prompts included in security tests or red-team exercises, and how are failures identified and corrected?
- Audit and response: What activity is logged, who can review those logs, and how does the vendor investigate and notify customers about incidents?
- Data handling: How long are prompts and outputs retained, and are customer records used to train models?
- Human controls: Which actions require review or approval before the assistant changes records, sends payments or communicates with customers?
- Product scope: Which accounting workflows, regions and plans support the AI features, and what safeguards apply to each?
Ask for documentation or a controlled demonstration rather than relying only on assurances that data is secure. If you test a system yourself, use test accounts and synthetic financial data—not real customer records—and verify that queries from one account cannot surface records belonging to another.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What happened to Copilot after the incident?
Sage introduced Copilot in February 2024 as an assistant for administrative and repetitive work, error detection and recommendations. The January 2025 incident occurred during invitation-only early access. In a release dated 27 January 2025, Sage said Copilot would become generally available to UK small and midsize businesses from March 2025. That announcement described a UK rollout; it does not establish availability in other regions or the current availability of every feature.
Quick Recap
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →
