The Machine's Word Convicts You: 900 Prosecutions on a Ledger Fujitsu Could Secretly Edit

Between 1999 and 2015 the UK Post Office prosecuted more than 900 subpostmasters, subpostmistresses and their staff for theft, fraud and false accounting. The evidence was a number. The number came out of an accounting system called Horizon, built and run by Fujitsu. When a branch’s books showed a shortfall, the Post Office treated that shortfall as money the person behind the counter had taken. Roughly 700 of the prosecutions were brought by the Post Office itself, which held private-prosecution powers. At least 236 people went to prison (Wikipedia — British Post Office scandal).

The shortfalls were phantoms. Horizon carried hundreds of documented bugs, some named for the branch where they surfaced — the Callendar Square bug that duplicated ledger entries, the Dalmellington bug that repeated a withdrawal every time a user pressed enter at a frozen screen (Wikipedia — British Post Office scandal). But the load-bearing fact is not that the software was buggy. It is that the software’s output was editable by people the accused never met, and the institution swore under oath that it wasn’t.

The Witness Nobody Could Cross-Examine

Horizon was treated in court as an unimpeachable witness. The branch account said you were short; therefore you were short; therefore you had taken it. The burden fell on the subpostmaster to explain a number generated by a system they could not inspect.

In the December 2019 Horizon Issues judgment, Mr Justice Fraser found that both Fujitsu and, to a lesser extent, the Post Office had remote access to branch records and could “insert, inject, edit or delete transaction data or data in branch accounts.” Fujitsu’s support staff could reach into a branch’s central record and change it, with the edit flowing back as though it had originated at the counter (judiciary.uk — Bates v Post Office judgment PDF). Computer Weekly, reviewing the evidence, described that access as “unrestricted and unauditable” (Computer Weekly).

So the witness could be altered, silently, by an unaccountable third party. And for roughly fifteen years the Post Office told courts the opposite: that branch accounts could only be changed by the subpostmaster at the counter. Fraser found that assurance false. He described the Post Office’s stance on Horizon’s reliability as “the 21st century equivalent of maintaining that the earth is flat” (judiciary.uk — Horizon Issues judgment PDF). Fujitsu has since acknowledged to Parliament that the software had bugs and errors and that the company assisted the Post Office in its prosecutions (Wikipedia — British Post Office scandal).

Seema Misra

Seema Misra ran a branch in West Byfleet, Surrey. A phantom Horizon shortfall of more than £70,000 led to a Post Office prosecution. She was convicted of theft and sentenced to fifteen months in prison in 2010, on the day before her son’s birthday, while pregnant. Days before her trial, Post Office solicitors had been told of a Horizon bug. Her defence was not (Wikipedia — British Post Office scandal).

Her conviction was quashed in 2021. She is innocent, and always was. What the machine did took a fraction of a second. Undoing it took eleven years.

What It Took to Undo

Correcting one bad number turned out to require most of the British state.

It took a group action. Five hundred and fifty-five claimants, led by former subpostmaster Alan Bates, brought a Group Litigation Order in the High Court in 2017; the trials before Fraser J ran through 2018 and 2019 and ended in a settlement (Wikipedia — Bates & Others v Post Office Ltd). It took the Court of Appeal, which in Hamilton & Others v Post Office Ltd quashed 39 of 42 convictions in 2021 and held that prosecuting the Horizon cases the way the Post Office had was “an affront to the conscience of the court.” Three of the exonerated had already died (judiciary.uk — Hamilton judgment PDF).

Then it took Parliament doing something it had never done before: quashing criminal convictions en masse by statute. The Post Office (Horizon System) Offences Act 2024 received Royal Assent on 24 May 2024. Section 1 states that “every conviction to which this Act applies is quashed on the coming into force of this Act” (legislation.gov.uk — 2024 c. 14). By the Ministry of Justice’s own tally, as of 30 June 2026 that Act had quashed 2,228 convictions across 610 people (gov.uk — quashed-convictions management information).

And, embarrassingly for everyone who had spent a decade on it, the thing that actually forced the state’s hand was a television drama. ITV’s Mr Bates vs The Post Office aired on four consecutive nights from 1 January 2024. Within days more than a million people had signed a petition, the former Post Office chief executive returned her CBE, and the Prime Minister announced the legislation that became the 2024 Act (Wikipedia — Mr Bates vs The Post Office). A decade of litigation and journalism moved the needle less than four nights of prime time. Bates was knighted in 2024 and reached a financial settlement in late 2025 (ITV News, via web archive).

The Cost the Money Can’t Reach

The statutory inquiry chaired by Sir Wyn Williams published the first volume of its final report on 8 July 2025. It found that at least around 10,000 people were affected, revised the wrongful-conviction estimate upward past 1,000, and recorded that at least 59 people had contemplated suicide. Sir Wyn wrote that he could not make a definitive finding linking the scandal to 13 deaths by suicide but did not rule it out as a “real possibility” (CBS News; Post Office Horizon IT Inquiry — reports and statements).

Compensation can return the money the Post Office took. It cannot return the years each person spent as the accused, carrying a debt that was real to them whether or not it was real in law.

The Pattern

Horizon is the cleanest real-world instance of the thing the whole series is about: a system’s output treated as ground truth, and a human being convicted on it, even when the machine is wrong and the people running it know it is wrong. This is not a story about artificial intelligence. It predates the chatbots by decades. Which is exactly why it matters — it is the non-LLM ancestor of “the model said so,” the same failure mode wearing older clothes.

It is Robodebt with a prison sentence at the end. The machine generates a number; the number is treated as a verdict; the person on the receiving end is handed the burden of disproving software they cannot see; and the institution that bought the automation defends its output long past the point where its own evidence says stop. Australia averaged your income and called the gap a debt. Britain read a corrupted ledger and called the gap a theft. In both, issuing the accusation took milliseconds and undoing it took the better part of a decade. That asymmetry — instant to accuse, near-impossible to reverse — is not a bug in these systems. It is what they are for.

The machine did not convict anyone. The people who swore the machine could not be wrong did.

The receipts (free, on this site): the body layer

This research appears in The Last Antibodies, Chapter 14.