News: 1737357794

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Sage Copilot grounded briefly to fix AI misbehavior

(2025/01/20)


Sage Group plc has confirmed it temporarily suspended its Sage Copilot, an AI assistant for the UK-based business software maker's accounting tools, this month after it blurted customer information to other users.

A source familiar with the developer told The Register late last week: "A customer found when they asked

[1]Sage Copilot

to show a list of recent invoices, the AI pulled data from other customer accounts including their own."

"It was reported via their support lines, verified, and the decision was made to pull access to the AI," the source continued.

[2]

The biz described the blunder as a "minor issue" to the The Register , and denied the machine-learning system had leaked GDPR-sensitive data as some had feared.

[3]

[4]

"After discovering a minor issue involving a small amount of customers with Sage Copilot in Sage Accounting, we briefly paused Sage Copilot," a company spokesperson said. "The issue showed unrelated business information to a very small number of customers. At no point were any invoices exposed. The fix is fully implemented and Sage Copilot is performing as expected."

Sage's spokesperson indicated Sage Copilot was taken offline for a few hours last Monday, to investigate the issue and implement a fix.

Have you experienced an AI system going off the rails? Tell us about it [5]in confidence .

Unveiled [6]in February 2024 , Sage Copilot is described by its creators as "a trusted team member, handling administrative and repetitive tasks in ‘real-time’, while recommending ways for customers to create more time and space to focus on growing and scaling their businesses."

The chatbot is intended to automate workflows, catch errors and generate suggested actions relevant to business accounting.

[7]

"Sage Copilot’s accuracy, security and trust have been prioritized every step of the way, combined with expert support, robust encryption, access controls, and compliance with data protection regulations," the biz says on its website.

Sage Copilot is presently available by invitation as an early access product, and is being used by a small number of customers; the company's spokesperson could not provide a specific figure.

[8]Top companies ground Microsoft Copilot over data governance concerns

[9]Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling

[10]EU demands a peek under the hood of X's recommendation algorithms

[11]Fining Big Tech isn't working. Make them give away illegally trained LLMs as public domain

AI models [12]make cybersecurity more difficult , according to Microsoft. And they generally come with warnings that their output needs to be verified since they're often wrong. Nonetheless, companies insist on deploying AI services, occasionally to their chagrin.

Apple this week [13]suspended Apple Intelligence's news summarization capability following concerns that the service's AI summaries were inaccurate.

Last year, Air Canada had to [14]pay a traveler hundreds of dollars after its chatbot misinformed the passenger about the airline's bereavement rate discount. And McDonald's ended its Automated Order Taker pilot after customers complained the AI [15]got orders wrong .

[16]

In 2023, a GM chatbot used by a Watsonville, California, auto dealership got talked into agreeing to sell a 2024 Chevy Tahoe [17]for $1 through some clever prompt engineering. Two years earlier, Zillow took a $304 million inventory write-down and cut 2,000 jobs after the real estate firm's bet on AI-based property valuations [18]sank its home-buying business.

AI models have [19]invented software package names, [20]cited non-existent court cases, and [21]accused people of [22]crimes they haven't committed.

Meanwhile, several large makers of AI models including Anthropic, Meta, Microsoft, OpenAI, and Nvidia [23]face copyright lawsuits over the data used to make these models. ®

Get our [24]Tech Resources



[1] https://www.sage.com/en-us/sage-copilot/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z44s2iqfLBQIO550D_-0KAAAARU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z44s2iqfLBQIO550D_-0KAAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z44s2iqfLBQIO550D_-0KAAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/Author/Email/Thomas-Claburn

[6] https://www.sage.com/en-us/news/press-releases/2024/03/sage-transform-2024-unveils-sage-copilot/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z44s2iqfLBQIO550D_-0KAAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://www.theregister.com/2024/08/21/microsoft_ai_copilots/

[9] https://www.theregister.com/2025/01/17/nvidia_cisco_ai_guardrails_security/

[10] https://www.theregister.com/2025/01/17/eu_x_algorithm_changes/

[11] https://www.theregister.com/2024/12/22/ai_poisoned_tree/

[12] https://www.theregister.com/2025/01/17/microsoft_ai_redteam_infosec_warning/

[13] https://www.theregister.com/2025/01/17/apple_intelligence_summaries_disabled/

[14] https://www.theregister.com/2024/02/15/air_canada_chatbot_fine/

[15] https://www.cbsnews.com/news/mcdonalds-ends-ai-drive-thru-ordering/

[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z44s2iqfLBQIO550D_-0KAAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[17] https://gmauthority.com/blog/2023/12/gm-dealer-chat-bot-agrees-to-sell-2024-chevy-tahoe-for-1/

[18] https://edition.cnn.com/2021/11/09/tech/zillow-ibuying-home-zestimate/index.html

[19] https://www.theregister.com/2024/09/30/ai_code_helpers_invent_packages/

[20] https://www.theregister.com/2023/05/31/texas_ai_law_court/

[21] https://www.theregister.com/2023/06/08/radio_host_sues_openai_claims/

[22] https://www.theregister.com/2024/08/26/microsoft_bing_copilot_ai_halluciation/

[23] https://www.bakerlaw.com/services/artificial-intelligence-ai/case-tracker-artificial-intelligence-copyrights-and-class-actions/

[24] https://whitepapers.theregister.com/



Getting answers...

Baudwalk

...from a bot trained on other people's data and processes, resulting in unfortunate information leaks?

Shirley not.

Too old for this sh*t

Talk about downplaying an issue.... Tis but a scratch

Zippy´s Sausage Factory

The biz described the blunder as a "minor issue"

I wonder how their customers' lawyers might describe it, though? Am I going to need to make some popcorn for this one?

munnoch

By minor they appear to mean "serious breach of data protection laws".

But never mind, only took them a couple of hours to tinker with it and its all good now. Until the next time...

When a small number of your customers might mean ALL your customers

Equality 7-2521

Sage wrote: "The issue showed unrelated business information to a very small number of customers"

&

From the article "Sage Copilot is presently available by invitation as an early access product, and is being used by a small number of customers"

So that's likely 100% of the customers on Sage Copilot were compromised in some way.

Re: When a small number of your customers might mean ALL your customers

I ain't Spartacus

Equality,

There may only be a small number of uses alpha- testing Sage's crappy AI - but that doesn't mean they haven't used ever customers' data to train it, and so the potential is that everybody's data has been revealed (at least in part) to this small number of users. Lovely.

LLMs can be very annoying. When you search for info on UK VAT rules nowadays - Google's "AI" confidently tells you the answer in a nice potted paragraph. With zero sources quoted and so no way of checking if it's even vaguely accurate. You need to keep scrolling until you find the relevant HMRC page, admittedly searching on Google is still usually quicker than searching on their own website.

Re: When a small number of your customers might mean ALL your customers

Phil O'Sophical

You need to keep scrolling until you find the relevant HMRC page

On the search return page, there's a line near the top with search options: "All News Images Videos Shopping Web Maps". Just click on "Web" instead of "All" and it should give you the AI-free results.

Mark my words

Anonymous Coward

There will be more data breaches in other companies due to copilot. It gets its info via sharepoint. If your sharepoint isn't setup correctly it WILL grab data from other company accounts. Its clear SAGE has all the other companies data in one place, in a place where it can be configured badly so gets scanned. In reality, they should have it all clearly seperate, like an air gab, but that would cost a fortune so no one is ever going to implement it.

Do something unusual today. Pay a bill.