The Post Office Horizon scandal is a case study in what happens when an organization trusts its software more than the people it accuses. Horizon was an accounting and point-of-sale system built by Fujitsu and rolled out across UK Post Office branches starting around 1999. Subpostmasters, the local operators who run individual branches, used it to record transactions and reconcile cash. When Horizon reported a shortfall, the Post Office treated the number as fact and held the subpostmaster personally liable for the missing money.
Many of those shortfalls were not real. Bugs, errors, and defects in Horizon could produce discrepancies in branch accounts that no subpostmaster had caused. Yet over roughly two decades, the Post Office pursued hundreds of operators for the apparent losses, demanding repayment, terminating contracts, and bringing criminal prosecutions for theft and false accounting. Around 900 people were prosecuted. Lives were destroyed: people lost their businesses, their savings, and their reputations, some were imprisoned, and some died before being cleared.
The turning point came in the group litigation brought by Alan Bates and more than 500 other claimants. In the Horizon Issues judgment handed down on 16 December 2019, Mr Justice Fraser examined the system in technical detail and concluded that Horizon was not, as the Post Office had long maintained, essentially reliable. The court found that the system carried bugs and defects with the potential to cause the very discrepancies subpostmasters had been blamed for. The judge was scathing about the Post Office’s posture, comparing its insistence on Horizon’s integrity in the face of contrary evidence to maintaining that the earth is flat.
That judgment unwound the central factual claim on which the prosecutions rested. If the software could create phantom shortfalls, then a shortfall on screen was not proof of theft, and convictions built on that assumption were unsafe. In the years that followed, courts quashed convictions in large numbers and the failure was recognized as one of the most widespread miscarriages of justice the country had seen.
A statutory public inquiry chaired by Sir Wyn Williams was established to investigate the implementation and failings of Horizon over its lifetime and the human cost of the scandal. Its work has documented how warnings were ignored, how the reliability of the system was defended in court, and how compensation should reach those harmed. The inquiry’s findings reinforce that this was not a single bug but an institutional failure to question the software.
For software practitioners, Horizon is a permanent cautionary tale about software-in-safety-critical-systems and the danger of treating computer output as infallible. A discrepancy report is evidence to be investigated, not a verdict. The deeper failure was governance: an organization that could not entertain the possibility its own system was wrong, and used the power of prosecution to enforce that certainty against the people least able to fight back.