> The BBC was able to access the PDF version of the OBR's key report at 11:45 on Wednesday by replacing the word 'March' with 'November' in the web address of a previous edition.

Simple URL prediction. You don't really need the former head of the NCSC to provide some suitable suggestions for this not happening again.

Shouldn't you have cyber experts there before you start posting market moving sensitive files on websites?

I mean, you don't need to be an expert advisor, do you, really?