<p>Noised is the word on the street from inside UK companies and organisations around the world.</p>
<p>Noised Magazine holds the UK&#8217;s largest database of completed IT Projects. From Cyber Essentials renewal dates to the most used AI models and platforms, Noised is the word on the street.</p>
<p>We track what&#8217;s being done and report on it to help our readers stay informed and learn what&#8217;s actually happening on the ground, what projects are being delivered, what software and tools teams are adopting, and how people are really using AI day to day.</p>
<p>Rather than working from press releases, Noised builds its coverage from the people doing the work, primary sources, and the individuals directly involved.</p>
<p>We hope you gain value from this publication and we are looking forward to go on this amazing journey together.</p>
<p>Thank you for reading Noised Magazine.</p>


What Is Noised Magazine?

<h2>Key Takeaways</h2>
<ul>
<li>Rolls-Royce&#8217;s predictive maintenance AI isn&#8217;t one system, it&#8217;s at least three distinct ones, covering different engines and different parts of the business, and most retellings of &#8220;Rolls-Royce uses AI to predict engine failures&#8221; collapse them into a single story that doesn&#8217;t quite exist. A UK C-suite reading this case study should notice the precision, or lack of it, in how the story usually gets told.</li>
<li>The broadest is Engine Health Monitoring (EHM), Rolls-Royce&#8217;s own current figures put it at monitoring &#8220;over 8,000 aircraft across Civil and Business aviation&#8221; fitted with RB211 and Trent engines, evolved over more than two decades from an original service that has since had AI and advanced analytics layered onto it.</li>
<li>A newer, narrower system, the Engine Vibration Health Monitoring Unit, deployed specifically on Rolls-Royce&#8217;s Pearl business jet engine family and detailed in a Microsoft case study published in April 2025, tracks more than 10,000 engine parameters and detects and prevents around 400 unplanned maintenance events a year. That figure belongs to the Pearl family specifically, not Rolls-Royce&#8217;s entire in-service fleet, a distinction the case study itself is careful about that a lot of secondary coverage isn&#8217;t.</li>
<li>A third, entirely separate AI system, nicknamed Signature Analyzer, has nothing to do with engines already in service. It uses machine vibration analysis and generative AI to inspect the roughly 2 million cooling holes Rolls-Royce used to check manually every month on turbine blades during manufacturing, lifting machine utilisation by 30% and cutting erroneous scrap classifications. It is a factory quality-control tool, not a predictive maintenance one.</li>
<li>The reason Rolls-Royce has invested this heavily and this specifically in monitoring engines it doesn&#8217;t operate traces back to a 1962 business model decision, not a recent AI strategy: Power-by-the-Hour, and its modern successor TotalCare, charge airlines a fixed rate per flying hour rather than for parts and labour, meaning Rolls-Royce itself, not the airline, absorbs the cost of an unplanned engine removal. For a UK C-suite, that&#8217;s the real lesson: Rolls-Royce&#8217;s predictive AI investment makes sense because its revenue model was already built to reward exactly the outcome the AI produces, decades before the AI existed to produce it.</li>
</ul>
<p>Rolls-Royce is one of the most cited names in enterprise AI case studies, usually reduced to a single sentence: it uses sensors and AI to predict when a jet engine needs maintenance before it fails. That sentence is true, and also flattens at least three separate systems, tracking different engines, run for different reasons, into one story. Read precisely, what Rolls-Royce has actually built says less about the cleverness of any individual algorithm and more about a company that restructured its entire business model around outcomes decades before it had the AI to optimise for them.</p>
<h2>Engine Health Monitoring: the broad, long-running foundation</h2>
<p>The oldest and broadest of Rolls-Royce&#8217;s monitoring systems is Engine Health Monitoring, EHM, available for the company&#8217;s RB211 and Trent engine families that power the majority of the world&#8217;s wide-body commercial aircraft. Rolls-Royce&#8217;s own current EHM service page describes a system that &#8220;analyses data from every engine and every flight,&#8221; now enhanced by AI, and states that it &#8220;monitors over 8,000 aircraft across Civil and Business aviation.&#8221; Where a system fault is detected, EHM can generate a specific troubleshooting recommendation, referencing an exact Fault Isolation Manual or Maintenance Manual task, or a customised notification sent directly to the operator, rather than a generic alert requiring an engineer to diagnose the problem from scratch. Rolls-Royce sells EHM as a subscription service, with a one-year initial term followed by rolling monthly renewal, a structure that itself signals how central the service has become to the ongoing customer relationship rather than being a one-off add-on.</p>
<h2>IntelligentEngine: the 2018 vision, and what it was actually meant to fix</h2>
<p>Rolls-Royce formalised its broader ambition for this data at the Singapore Airshow on 6 February 2018, launching what it called the IntelligentEngine, described in the company&#8217;s own press release as the third evolution of its service model, following a shift from repair-based servicing to Engine Health Monitoring under the TotalCare brand, and now to a fully data-driven approach. The company said it expected to generate 70 trillion data points annually from its in-service fleet by the end of 2018 alone, built on foundations including R2 Data Labs, a dedicated data science unit Rolls-Royce had launched two months earlier, in December 2017, plus partnerships with Tata Consultancy Services and Microsoft, and data innovation hubs spread across the UK, US, Germany, Singapore, India and New Zealand. &#8220;Digital information is the lifeblood of the IntelligentEngine,&#8221; said Dominic Horwood, Rolls-Royce&#8217;s then-Director of Customer and Services for Civil Aerospace, in the announcement. That 70-trillion figure describes the scale of raw data Rolls-Royce expected to be collecting by 2018, not a processed or actionable-insight figure, and it&#8217;s worth reading as an infrastructure ambition statement rather than a performance claim.</p>
<h2>The Engine Vibration Health Monitoring Unit: a newer, narrower, better-quantified system</h2>
<p>The most concretely quantified of Rolls-Royce&#8217;s monitoring systems is also its newest and narrowest. Detailed in a Microsoft customer case study published on 1 April 2025, the Engine Vibration Health Monitoring Unit, EVHMU, is deployed specifically on Rolls-Royce&#8217;s Pearl engine family, which powers Gulfstream business jets rather than the wide-body commercial aircraft EHM more broadly covers. Built on Microsoft Cloud for Manufacturing, the system tracks more than 10,000 individual engine parameters and, across the fleets it covers, detects and prevents approximately 400 unplanned maintenance events a year, Rolls-Royce told Microsoft, avoiding what the case study describes as millions in cost from unplanned repairs and disruption. Fault resolution, previously taking days, now happens in near real-time. &#8220;By digitizing operations, we&#8217;re driving engineering innovation while reducing cost and time to market, to deliver an enhanced customer experience,&#8221; said Kaveh Pourteymour, Rolls-Royce&#8217;s Group Chief Digital and Information Officer, in the case study. Nikki Grady-Smith, the company&#8217;s Chief Transformation Officer, was more measured about how far the work still had to go: &#8220;Digital is a key enabler of our transformation. And whilst we are already seeing clear benefits, whether in engine design, operations, or customer solutions, there&#8217;s still much more to unlock.&#8221;</p>
<h2>Signature Analyzer: the AI system that has nothing to do with engines in service</h2>
<p>The same 2025 Microsoft case study describes a third system that is genuinely easy to mistake for part of the same predictive-maintenance story, and isn&#8217;t. Signature Analyzer uses machine vibration analysis combined with generative AI to inspect turbine blade cooling holes during manufacturing, not in-service monitoring at all. Rolls-Royce used to inspect roughly 2 million of these cooling holes manually every month, checking for defects that could compromise a blade&#8217;s cooling performance once the engine was in use. &#8220;Historically, we inspected about 2 million cooling holes per month manually. With Microsoft AI, we&#8217;re able to optimize manual inspection, dramatically reducing the processing time of each component,&#8221; said Tim Pickup, Rolls-Royce&#8217;s Digital Manufacturing Lead, in the case study. The result was a 30% increase in machine utilisation and a sharp reduction in components incorrectly classified as scrap. It&#8217;s a legitimate, well-quantified AI deployment, but it belongs to Rolls-Royce&#8217;s factory floor, catching manufacturing defects before an engine is ever built, not to the fleet of engines already flying that EHM and EVHMU are built to watch.</p>
<h2>Why any of this makes commercial sense: a 1962 decision, not a recent one</h2>
<p>The detail that actually explains why Rolls-Royce has invested this specifically in predicting failures in engines it doesn&#8217;t itself fly predates AI by six decades. Power-by-the-Hour, a service model Rolls-Royce pioneered in 1962 to support the Viper engine on an early business jet, charged operators a fixed rate per flying hour rather than billing separately for parts and labour when something broke. The modern version of that model, TotalCare, works the same way: airlines pay Rolls-Royce a fixed rate per flying hour, under contracts that commonly run 10 to 20 years, occasionally longer, and Rolls-Royce is only fully rewarded when engines keep flying without unplanned removals. An unplanned maintenance event under that structure isn&#8217;t primarily the airline&#8217;s cost to absorb; a meaningful share of it lands on Rolls-Royce. That single fact is why EHM, IntelligentEngine and EVHMU exist in a coherent line at all: each one is a more capable way of protecting a revenue model that already rewarded exactly the outcome, engines that don&#8217;t need unplanned maintenance, the AI was eventually built to produce.</p>
<h2>What a UK C-suite should actually take from this</h2>
<p>The instructive part of Rolls-Royce&#8217;s story isn&#8217;t any single accuracy figure or data volume, most of which, read carefully, apply to one specific engine family or one specific factory process rather than the business as a whole. It&#8217;s the sequencing: the commercial incentive to predict and prevent failure was built into Rolls-Royce&#8217;s contracts in 1962, more than sixty years before the current generation of AI existed to serve it well. EHM, IntelligentEngine and EVHMU are three successive, increasingly capable attempts to get better at a job the business model had already assigned itself. For a board considering its own predictive-maintenance or reliability AI investment, the useful question Rolls-Royce&#8217;s history actually raises isn&#8217;t which vendor or platform to copy. It&#8217;s whether the organisation&#8217;s own revenue model rewards the outcome the AI is meant to produce, in the specific way TotalCare rewards Rolls-Royce for engines that don&#8217;t fail unexpectedly, or whether the AI is being asked to manufacture an incentive the business itself doesn&#8217;t yet have.</p>


Rolls-Royce’s Predictive Maintenance AI Isn’t One System. It’s Three, and a 1962 Business Decision

<h2>Key Takeaways</h2>
<ul>
<li>Klarna&#8217;s AI customer service story is really two announcements eighteen months apart, and a UK C-suite should read both, not just the first one that went viral. In February 2024, Klarna said its OpenAI-built assistant handled 2.3 million conversations in its first month, doing the equivalent work of 700 full-time agents, cutting resolution time from 11 minutes to under 2, and was projected to add $40 million to 2024 profit.</li>
<li>By May 2025, chief executive Sebastian Siemiatkowski told Bloomberg the strategy had gone too far. &#8220;We focused too much on efficiency and cost,&#8221; he said. &#8220;The result was lower quality, and that&#8217;s not sustainable.&#8221; Klarna started recruiting human customer service agents again, on flexible, remote, gig-style contracts.</li>
<li>The headcount numbers are genuinely mixed, and worth reading precisely rather than as a clean before-and-after. Klarna&#8217;s workforce fell from roughly 5,000 to almost 3,000 employees, about 40%, but Siemiatkowski himself credited much of that to ordinary staff attrition, which he put at 15 to 20% a year, not to the AI system directly replacing people.</li>
<li>The AI didn&#8217;t get switched off. As of the May 2025 reversal, it was still handling two-thirds of all customer inquiries, response times were 82% faster than before the AI launched, and repeat contact rates were still down 25%. What changed was where the company drew the line between what AI should handle and what a person should.</li>
<li>Klarna reversed its AI-first messaging five months before pricing a $1.37 billion IPO on the New York Stock Exchange in September 2025 at a $15.11 billion valuation, itself a steep comedown from the more than $45 billion the company was valued at in 2021. For a UK C-suite, the lesson isn&#8217;t that Klarna&#8217;s AI failed. It&#8217;s that a cost-driven AI rollout and a customer-quality AI rollout are different projects with different failure modes, and Klarna ran the first one before realising it needed the second.</li>
</ul>
<p>Klarna&#8217;s AI customer service assistant is the most cited AI case study in enterprise circles for a reason: it is one of the few with a genuinely public, multi-year arc, a triumphant launch, a candid reversal, and enough concrete numbers at each stage to actually compare. Most AI case studies a UK C-suite reads are either brand-new and unproven or old enough that no one is still checking the follow-up. Klarna&#8217;s is neither. It has been checked, restated and partly walked back by its own chief executive, on the record, twice.</p>
<h2>What Klarna actually announced in February 2024</h2>
<p>Klarna&#8217;s AI assistant, built in partnership with OpenAI, went live globally in Klarna&#8217;s app in February 2024. In a press release dated 27 February 2024, Klarna said the assistant had handled 2.3 million conversations in its first month, two-thirds of Klarna&#8217;s total customer service chat volume, work the company said was equivalent to that of 700 full-time human agents.</p>
<p>Average resolution time fell from 11 minutes to under 2, and repeat customer inquiries, people re-contacting support because their issue hadn&#8217;t actually been resolved, dropped 25%.</p>
<p>Klarna said the assistant was on par with human agents on customer satisfaction scores, available around the clock in 23 markets, and could communicate in more than 35 languages. The company estimated the assistant would drive a $40 million improvement to 2024 profit. &#8220;This AI breakthrough in customer interaction means superior experiences for our customers at better prices,&#8221; said Sebastian Siemiatkowski, Klarna&#8217;s co-founder and chief executive, in the announcement.</p>
<p>OpenAI&#8217;s own chief operating officer, Brad Lightcap, called Klarna &#8220;at the very forefront among our partners in AI adoption and practical application.&#8221;</p>
<h2>The hiring freeze nobody outside the company saw happen in real time</h2>
<p>What followed the launch wasn&#8217;t publicised with the same fanfare. In a Bloomberg Television interview reported in December 2024, Siemiatkowski said Klarna had effectively stopped hiring around a year earlier as the AI system took on more of the workload, with headcount falling 22%, to roughly 3,500 employees, over that period, driven mostly by natural attrition rather than layoffs.</p>
<p>That framing matters: Klarna didn&#8217;t announce mass redundancies tied to the AI launch. It quietly stopped backfilling roles as people left, and let the AI system absorb the resulting gap in customer service capacity.</p>
<h2>May 2025: the reversal, in Siemiatkowski&#8217;s own words</h2>
<p>By May 2025, in another Bloomberg interview reported by trade publication CX Dive and others, Siemiatkowski said the strategy had gone further than it should have. &#8220;We focused too much on efficiency and cost,&#8221; he said. &#8220;The result was lower quality, and that&#8217;s not sustainable.&#8221; He was specific about what he thought the company had got wrong: not that AI itself was the mistake, but that Klarna had let cost-cutting outrun the customer experience it owed people who needed genuinely human help. &#8220;I just think it&#8217;s so critical that you are clear to your customer that there will always be a human if you want,&#8221; he told Bloomberg, adding, &#8220;Really investing in the quality of the human support is the way of the future for us.&#8221; Klarna began recruiting customer service staff again, piloting what CX Dive described as an &#8220;Uber-type&#8221; flexible, remote, gig-style arrangement aimed at &#8220;highly educated students, professionals and entrepreneurs&#8221;, with one stated goal being to bring in-house some of the customer service work Klarna had previously outsourced to third-party contractors, rather than simply re-hiring for the original 700 roles the AI had absorbed.</p>
<p>Separately, in a CNBC interview around the same time, Siemiatkowski gave the fuller headcount picture: Klarna&#8217;s total workforce had fallen from about 5,000 to almost 3,000 employees, a roughly 40% reduction.</p>
<p>But he was careful not to credit all of that to the AI system directly. &#8220;Natural attrition in a company like ours is 15-20% per year, so we shrink naturally 15-20% by people just leaving,&#8221; he said, framing the AI&#8217;s role as enabling the company to not backfill those departures rather than actively cutting jobs itself.</p>
<p>That distinction, between AI-enabled attrition and AI-driven layoffs, is one most retellings of the Klarna story flatten, and it&#8217;s a materially different claim about what the technology actually did.</p>
<h2>The AI didn&#8217;t get switched off. The target changed.</h2>
<p>The detail most useful to a UK C-suite is what didn&#8217;t change in May 2025: the AI assistant was still handling roughly two-thirds of all customer inquiries even after Siemiatkowski&#8217;s public reversal, CX Dive reported, with response times still 82% faster than before the assistant launched and repeat contact rates still down 25%. Klarna didn&#8217;t retreat from AI-handled customer service as a category.</p>
<p>It retreated from treating &#8220;AI handles it&#8221; as sufficient for every kind of interaction, and rebuilt a deliberate lane for cases, complex disputes, financial hardship, anything where getting it wrong costs a customer real money or trust, that get routed to a person instead of resolved end-to-end by the assistant.</p>
<p>The rollout&#8217;s actual failure mode wasn&#8217;t that the AI performed badly against the metrics Klarna originally chose to measure. It was that those metrics, speed and average satisfaction, didn&#8217;t capture whether harder, lower-volume, higher-stakes cases were being handled well.</p>
<h2>The timing a UK C-suite shouldn&#8217;t miss</h2>
<p>Context that rarely makes it into the Klarna story: the May 2025 reversal came five months before Klarna priced its US initial public offering. Klarna listed on the New York Stock Exchange under the ticker KLAR in September 2025, pricing shares at $40 and raising $1.37 billion at a $15.11 billion valuation, a real recovery from the roughly $6.7 billion trough Klarna&#8217;s valuation fell to in 2022, but still a steep comedown from the more than $45 billion it commanded at its 2021 peak.</p>
<p>A company preparing to go public in 2025, after a valuation collapse, had every commercial incentive to tell an aggressive cost-efficiency story through 2024, and then to be seen correcting course on customer quality before investors started asking pointed questions about churn and brand damage.</p>
<p>None of that makes Siemiatkowski&#8217;s admission untrue. It&#8217;s a reasonable, evidence-based reading of why the timing looked the way it did.</p>
<h2>What a UK C-suite should actually take from this</h2>
<p>Klarna&#8217;s AI assistant did what Klarna said it did in February 2024: handled millions of routine conversations faster and, on the metrics Klarna chose to track, at least as well as the humans it replaced.</p>
<p>That part of the story holds up. What failed wasn&#8217;t the AI&#8217;s competence at the task it was measured against; it was the decision to let a cost and efficiency target stand in for a customer-quality target, and to let that substitution run for the better part of a year, through a hiring freeze and a real headcount reduction, before correcting it in public.</p>
<p>For a board weighing its own AI-driven customer service plans, the specific, transferable lesson isn&#8217;t &#8220;AI customer service doesn&#8217;t work,&#8221; which the two-thirds figure that survived the reversal directly contradicts.</p>
<p>It&#8217;s that the metrics chosen to declare an AI rollout a success will determine what gets missed, and that a board should decide, before launch, which failure it would rather catch early: a bad quarter of efficiency numbers, or a public reversal after a year of customers quietly getting worse service than they were promised.</p>


Klarna Cut 700 Jobs’ Worth of Work With AI. Its CEO Now Says That Was the Mistake

<h2>Key Takeaways</h2>
<ul>
<li>Twelve AI deployments published on this site reduce to three real categories: internal knowledge retrieval, customer- or citizen-facing communication, and narrower plain-language interfaces over an existing system.</li>
<li>The largest, most specific results came from the narrowest, most rules-based tasks, such as Amey&#8217;s bid-writing time falling from four days to 30 minutes.</li>
<li>Four of the twelve, moinAI, contexxt.ai, Yepic.AI and Policy-Insider.AI, all run on OVHcloud infrastructure specifically for GDPR and European data-sovereignty reasons.</li>
<li>Jaguar Land Rover&#8217;s case study describes a roadmap and a secured business case rather than a finished, measured deployment, unlike the other eleven.</li>
<li>Across the set, the size and specificity of a reported result tracks how narrow and well-bounded the automated task was, not how ambitious the AI project sounded.</li>
</ul>
<h2>TLDR</h2>
<ul>
<li>Twelve AI deployments published on this site, spanning automotive engineering, water utilities, infrastructure services, legal tech, aged care, local government, customer chat, enterprise knowledge search, generative video and public-affairs monitoring, describe a narrower range of actual mechanisms than the industry variety suggests. Most are built to solve one of two problems: finding information that already existed but was too slow to locate, or communicating with a customer or citizen faster than a human team could manage alone.</li>
<li>The clearest, most repeatedly measured successes cluster around document-heavy, rules-based tasks. Amey&#8217;s bid-writing platform cut drafting time from four days to 30 minutes; an unnamed Dynamiq legal client cut contract review from 1.5 hours to 45 minutes; Anglian Water cut manual governance effort by up to 6,000 hours a year. In each case, the AI was retrieving and structuring information a human already had the standing to evaluate, not making a new judgement call.</li>
<li>A distinct European vendor cluster runs through four of the twelve deployments, moinAI, contexxt.ai, Yepic.AI and Policy-Insider.AI, all built on OVHcloud infrastructure specifically because of GDPR and data-sovereignty requirements their customers demanded. None of the four cite performance or cost as the primary reason for that infrastructure choice; all four cite European hosting as close to non-negotiable.</li>
<li>Not every case study reports a completed, measured result. Jaguar Land Rover&#8217;s engagement describes a roadmap and a secured business case, not a deployed tool with a time saving attached, a genuinely different, earlier stage of the same underlying problem the other eleven case studies describe as finished.</li>
<li>For a UK C-suite, the practical value of reading these twelve together isn&#8217;t a list of AI success stories to imitate individually. It&#8217;s the pattern underneath them: the deployments with the clearest, most defensible results all automated a narrow, well-bounded, previously manual task, and the ones with the vaguest results were the ones asked to do more than that.</li>
</ul>
<p>Twelve AI case studies published on this site look, on the surface, like twelve unrelated stories about twelve unrelated organisations. Read together, in their own words, they describe a much smaller number of actual problems being solved, and a genuinely useful pattern in which of those problems produced results specific enough to trust.</p>
<h2>Twelve deployments, and what each one was actually built to do</h2>
<p>At <a rel="nofollow" href="https://www.networksjournal.com/content/jaguar-land-rover-ai-investment-roadmap-engineering">Jaguar Land Rover</a>, the problem was strategic rather than operational: building a business case for a new, data-driven engineering operating model and prioritising which AI use cases were worth pursuing across a 16,000-strong engineering workforce. Aiimi applied its AI Strategy Framework to build a roadmap measured against impact, feasibility, affordability and enterprise alignment, and separately extended Enterprise Search over JLR&#8217;s product engineering documentation. &#8220;They helped us show where data and AI could make a real difference to engineering, aligning that to business value and shaping an AI roadmap that builds momentum quickly,&#8221; said Dave Hird, JLR&#8217;s Head of Data Driven Engineering &#038; AI.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/anglian-water-asset-document-governance-automation">Anglian Water</a> solved a related but more advanced version of the same problem. Asset and site documentation was scattered across physical &#8220;blue boxes,&#8221; shared drives and specialist applications; manual audits consumed up to 17,000 hours per cycle, and inspectors repeatedly flagged document control issues because field teams couldn&#8217;t reliably find current information on site. Aiimi&#8217;s Virtual Blue Box automatically classifies and tags documents across all 7,000 of the utility&#8217;s sites, running continuous compliance checks. &#8220;By harnessing the capabilities of Machine Learning and Natural Language Processing, it addresses critical challenges faced by technicians in having access to the most relevant and latest information when they&#8217;re on-site and need it most,&#8221; said Stuart Rawdon, Anglian Water&#8217;s Enterprise Content Governance Manager.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/amey-generative-ai-knowledge-platform-bid-writing">Amey</a> had &#8220;decades of asset management expertise&#8221; locked inside individual silos rather than something anyone could quickly search, according to this publication&#8217;s own account. FOIL built Gennie, a generative AI knowledge platform integrated into Amey&#8217;s Microsoft ecosystem. &#8220;We have this vast, deep experience of how we manage assets for our clients. What if you could bring together all of that knowledge and make it searchable and instantaneous?&#8221; said Rob Curley, Amey&#8217;s Project Director.</p>
<p>An unnamed client of <a rel="nofollow" href="https://www.networksjournal.com/content/dynamiq-ai-legal-agent-contract-review">Dynamiq</a> faced the same shape of problem inside a legal department: reviewing thousands of contracts and regulatory documents on tight timelines while relying on costly outside counsel to fill the gaps. Dynamiq built an AI legal agent on the IBM watsonx platform. &#8220;IBM watsonx.data provides a very robust platform for integrating and embedding proprietary client data for AI agents,&#8221; said Vitalii Duk, Dynamiq&#8217;s founder and chief executive.</p>
<p>At <a rel="nofollow" href="https://www.networksjournal.com/content/regis-aged-care-generative-ai-clinical-handover">Regis Aged Care</a>, Australia&#8217;s largest residential aged care provider, clinicians spent two to three hours per shift reviewing more than 200 pages of clinical notes during handovers. Cognizant built a generative AI assistant on Microsoft Copilot Studio, benchmarked against senior clinician standards throughout development. &#8220;Be ambitious about the question you want answered. Don&#8217;t limit yourself in terms of what you think is possible,&#8221; said Imtiaz Bhayat, Regis Aged Care&#8217;s Chief Information Officer.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/ferndown-town-council-decisions-ai-meetings">Ferndown Town Council</a> moved the same underlying idea into local government: a Clerk previously managing agenda preparation and action tracking entirely by hand adopted GovMeetings, a platform powered by Decisions AI. &#8220;Decisions AI has completely reshaped how we run our meetings. It&#8217;s efficient, professional, and intuitive,&#8221; said Liz Bishopp, the council&#8217;s Clerk.</p>
<p>The remaining six deployments move away from internal knowledge retrieval into customer- and citizen-facing communication, and generative content. <a rel="nofollow" href="https://www.networksjournal.com/content/moinai-secures-german-health-insurer-chats-with-eu-based-managed-databases">moinAI</a>, a Hamburg-founded chatbot company serving more than 100 German customers including major insurers, processes several million customer interactions a year. &#8220;Our customers, particularly in the German health sector and SMEs, require the strictest data protection and security standards, and prefer a provider based in Germany or Europe,&#8221; said Florian Nommensen, moinAI&#8217;s Managing Director and CTO.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/contexxt-ai-generative-ai-knowledge-platform">contexxt.ai</a>, a DeepTech startup founded within an academic setting in 2023, built its Sesame platform on a zero-knowledge architecture so that neither it nor its cloud provider can access customer data being processed. &#8220;Research shows we spend up to two hours a day searching for information. Sesame gives that time back,&#8221; said founder and chief executive Torsten Katthöfer.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/yepic-ai-generates-1-million-videos-on-high-end-gpu-cloud-instances">Yepic.AI</a> builds generative AI video and voice translation technology. &#8220;Twenty-five million Americans don&#8217;t speak English, and in the UK nearly 1 million people can&#8217;t speak English well enough to access healthcare without an interpreter,&#8221; said Aaron Jones, the company&#8217;s CEO, framing the tool as an access problem rather than a productivity one.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/policy-insider-ai-processes-5000-daily-policy-documents-on-gdpr-compliant-public-cloud">Policy-Insider.AI</a> processes around 5,000 new political documents a day across more than 40 institutions and 8,000 daily social media posts from over 4,000 policymakers, replacing manual monitoring of public policy across languages and borders. &#8220;The availability of powerful CPU and latest GPU architectures&#8230; is crucial to our platform effectively handling AI workloads,&#8221; said Agata Chudzinska, the company&#8217;s co-founder and Head of AI.</p>
<p><a rel="nofollow" href="https://www.networksjournal.com/content/velotix-ai-assistant-development-time-compliance">Velotix</a> embedded a conversational assistant into its data access platform so users could manage compliance policy in plain language rather than through specialist tooling. &#8220;With AI supporting natural language queries, we give users the freedom to stay focused on their work, while intelligent policy enforcement runs silently in the background,&#8221; said Yoram Segal, the company&#8217;s Chief Technology Officer and Chief AI Officer.</p>
<p>And at <a rel="nofollow" href="https://www.networksjournal.com/content/akzonobel-corporate-event-app-guest-communication">AkzoNobel</a>, the problem was smaller in scale but familiar in shape: fragmented guest communication at corporate events, information scattered across emails and PDFs. QuantumXL built an AI-powered guest app. &#8220;They really listened to the brief and delivered above and beyond,&#8221; said Tina Waller, AkzoNobel&#8217;s Events Manager.</p>
<h2>Comparisons of the projects</h2>
<p>Laid side by side, these twelve deployments split cleanly into three categories rather than twelve unique stories. Six, Jaguar Land Rover, Anglian Water, Amey, Dynamiq&#8217;s client, Regis Aged Care and Ferndown Town Council, are internal knowledge-retrieval tools: AI built to find, summarise or structure information a human employee already had standing to use, just not quickly. Four, moinAI, contexxt.ai, Yepic.AI and Policy-Insider.AI, are customer- or public-facing communication and content tools, chat, translation, video and document monitoring, aimed outward rather than at internal process. Velotix and AkzoNobel sit closer to the first group in mechanism, plain-language interfaces over an existing system, but serve narrower, more specific functions, data compliance and event logistics respectively, than the broader knowledge-retrieval cluster.</p>
<p>A distinct vendor pattern runs through the outward-facing cluster specifically: moinAI, contexxt.ai, Yepic.AI and Policy-Insider.AI are all built on OVHcloud infrastructure, and all four cite the same reason, GDPR compliance and European data sovereignty, rather than raw performance or cost, as the deciding factor. contexxt.ai&#8217;s Torsten Katthöfer put it most directly: &#8220;We were looking for a partner that thinks and acts with an European mindset.&#8221; That&#8217;s a genuinely different kind of infrastructure decision than the internal-tooling cluster made: Dynamiq&#8217;s client and Velotix both chose IBM&#8217;s watsonx platform specifically for enterprise integration and on-premises deployment flexibility for regulated finance and healthcare clients, while Aiimi&#8217;s two clients, Jaguar Land Rover and Anglian Water, and FOIL&#8217;s client, Amey, chose their vendors for domain-specific knowledge architecture rather than infrastructure sovereignty at all.</p>
<p>The clearest outlier among the twelve is Jaguar Land Rover, and it&#8217;s worth reading as a genuine methodological control rather than a weaker result. Every other case study in this set reports a completed deployment with a measured outcome attached. JLR&#8217;s reports a secured business case, leadership buy-in and use cases &#8220;moving into active development,&#8221; a roadmap-stage engagement rather than a finished one. That&#8217;s not a flaw in the case study; it&#8217;s evidence the other eleven organisations had already passed the stage JLR was still working through when this publication&#8217;s account of its project was written.</p>
<h2>Successes</h2>
<p>Where these case studies report a measured result, the results are large and specific rather than vague. Amey&#8217;s bid drafting time fell from four days to 30 minutes, a 95% reduction, with 80% of tender content now generated through the platform and, in the organisation&#8217;s own account, 100% of previously siloed institutional knowledge retained rather than lost to staff turnover. Dynamiq&#8217;s client cut contract review time from 1.5 hours to 45 minutes, cut the time to answer business queries from two days to 60 minutes, and cut clause identification from 20 minutes to two. Anglian Water&#8217;s Virtual Blue Box cuts manual governance effort by up to 6,000 hours a year, delivered zero minor risks in a subsequent BSI audit, reduced Environment Agency and EPA visit actions by 40%, and is estimated to avoid up to £450,000 in annual costs. Regis Aged Care cut clinical handover review from two to three hours down to under one, with zero hallucinations recorded during trials and nearly 60% of users engaging with the assistant daily or several times a week. Ferndown Town Council cut meeting preparation time by 40%.</p>
<p>Velotix&#8217;s result is the most dramatic in relative terms: a conversational assistant that would otherwise have taken six months or more to build launched in one month, an 80%-plus reduction in development time, with an expected 60 to 70% cut in compliance costs and up to 95% fewer manual tasks. Yepic.AI&#8217;s growth figures are the clearest commercial validation in the set: Yepic Studio generated 1 million videos, and the company&#8217;s monthly revenue grew from $2,000 to $50,000 within five months. AkzoNobel&#8217;s app achieved adoption rates above 95%, and Policy-Insider.AI now handles roughly 100,000 queries a day at peak, scaling with major political events rather than breaking under them. Across all eleven completed deployments in this set, not one reports a negative or null result; where a case study is candid about a gap, as Amey&#8217;s and Dynamiq&#8217;s client&#8217;s accounts are about the absence of any downside mentioned at all, that absence is itself worth reading cautiously rather than as proof nothing went wrong.</p>
<h2>Things to learn</h2>
<p>The first lesson from reading these twelve together is that the size of the result tracks the narrowness of the problem, not the ambition of the AI. The deployments with the largest, most specific, most confidently reported numbers, Amey, Dynamiq&#8217;s client, Anglian Water, Velotix, all automated a single, well-bounded task with a clear existing correct answer: a bid response format, a contract clause, a compliance policy, an audit record. The deployments with output that&#8217;s harder to verify independently, generative video, chatbot conversation quality, event-app satisfaction, report adoption and growth figures rather than accuracy or time-saved figures, because there often isn&#8217;t a single correct answer to measure against.</p>
<p>The second lesson is that infrastructure choices in this set were rarely about the AI model itself. Four companies chose the same cloud provider for the same non-technical reason, GDPR and data sovereignty, and two chose IBM&#8217;s watsonx platform for enterprise integration and on-premises flexibility rather than model quality. A board evaluating a vendor for a similar deployment should expect the infrastructure conversation to be dominated by compliance and integration requirements specific to its own regulatory environment, not a comparison of model benchmarks.</p>
<p>The third lesson is the one Jaguar Land Rover&#8217;s case study makes visible by not fitting the pattern of the other eleven: a roadmap-and-business-case stage is a legitimate, necessary part of an AI programme, not a sign of a stalled one, and a board should expect its own early-stage AI initiatives to look like JLR&#8217;s account rather than Amey&#8217;s or Velotix&#8217;s finished numbers. Reading a roadmap-stage case study against a completed-deployment one as though they represent the same level of achievement is exactly the kind of imprecise comparison that makes AI case studies less useful than they should be, and precisely the comparison a UK C-suite should avoid making when it reviews its own AI programme&#8217;s progress against outside examples.</p>


Twelve AI Deployments Compared: What Networks Journal’s Own Case Study Archive Actually Shows

<h2>Key Takeaways</h2>
<ul>
<li>Apollo Global Management, which manages $938 billion in assets, confirmed that hackers accessed its cloud systems between July 6 and July 10, 2026, exposing names, dates of birth, home addresses, contact information and Social Security numbers.</li>
<li>Google&#8217;s threat intelligence team tracks the group behind this campaign as UNC6671, operating under the aliases Falcon, Helix, Pink and Redact; subsequent reporting on that research has tied the campaign to Apollo, Blackstone, Bridgewater and Bain Capital, among other firms.</li>
<li>The attackers do not rely on malware or software exploits. They call employees on their personal mobile phones, impersonate the internal IT helpdesk, and talk victims into entering credentials and multi-factor authentication codes on lookalike login pages.</li>
<li>Apollo is offering affected individuals 24 months of complimentary credit monitoring and identity protection through Cyberscout, including proactive fraud assistance, with enrollment required within 90 days.</li>
<li>Google&#8217;s researchers recommend phishing-resistant, FIDO2-based authentication, shorter session lifetimes, and stricter controls on IT helpdesk identity verification as the most effective defenses against this style of attack.</li>
</ul>
<div style="border: 1px solid #ddd; border-radius: 8px; padding: 20px 24px; margin: 24px 0; background: #f9f9f9;">
<h3 style="margin-top: 0;">Social Engineering Attacks: 2023–2026 at a Glance</h3>
<p style="margin-bottom: 8px;"><strong>Most reported social engineering techniques against enterprises (industry threat reporting, 2023–2026):</strong></p>
<ul style="margin-bottom: 8px;">
<li>Phishing and spear-phishing email remains the most common initial-access technique reported across the period, typically used to harvest credentials or deliver malicious links and attachments.</li>
<li>Voice phishing (vishing), including help desk and IT support impersonation, has grown sharply as a distinct category since 2023, driven by campaigns targeting large enterprises through calls to employees&#8217; personal phones.</li>
<li>Adversary-in-the-middle (AiTM) phishing kits, which proxy a real login session to steal credentials and session cookies in real time, have become a standard tool for bypassing traditional multi-factor authentication.</li>
<li>SIM swapping and MFA-fatigue (push-bombing) attacks continue to be used to defeat one-time-passcode and push-based authentication.</li>
<li>Business email compromise, where attackers impersonate executives or vendors to redirect payments, remains one of the costliest categories by reported financial loss, according to the FBI&#8217;s Internet Crime Complaint Center.</li>
</ul>
<p style="margin-bottom: 0; font-size: 0.9em; color: #555;">Figures reflect patterns described in public threat intelligence reporting, including from Google/Mandiant, the FBI IC3, and industry incident-response reports, rather than a single unified dataset.</p>
</div>
<p>Private equity firms manage some of the most sensitive information in the financial system: the personal data of limited partners, the financial details of portfolio companies, and deal information worth billions of dollars before it becomes public. That combination has made them a priority target for a hacking campaign that does not need to break through a firewall or exploit a piece of software. It only needs to get one employee on the phone.</p>
<h2>What happened at Apollo</h2>
<p>Apollo Global Management, the private equity firm that manages $938 billion in assets and employs roughly 5,000 people, confirmed that hackers gained unauthorized access to certain of its cloud platforms between July 6 and July 10, 2026. The firm disclosed the incident in a <a href="https://oag.ca.gov/ecrime/databreach/reports/sb24-628551" target="_blank" rel="nofollow noopener">breach notification letter filed with the California Attorney General</a> on August 20, 2026, which confirmed at least 500 California residents were affected; the total number of people impacted nationwide has not been made public.</p>
<p>The categories of data involved were names, dates of birth, contact information, home addresses, and Social Security numbers, according to the filing. Apollo has said it has no evidence, at this time, that the information has been publicly posted or used for identity theft or fraud.</p>
<p>Apollo was not alone. Press coverage of the same UNC6671 campaign, drawing on the Google research described below, has reported that Blackstone, Bridgewater and Bain Capital were also targeted, among a wider group of firms across other sectors caught up in the same threat actor&#8217;s activity.</p>
<h2>What they&#8217;re doing about it</h2>
<p>Apollo&#8217;s response follows the standard playbook for a breach involving Social Security numbers and other identifying data. The firm is providing affected individuals with what its notification describes as &#8220;complimentary access to Credit Monitoring and Identity Protection Services at no charge.&#8221; Enrolled individuals receive alerts &#8220;for twenty-four months from the date of enrollment when changes occur to your credit file,&#8221; giving them an early warning if someone tries to open a line of credit or otherwise use their identity fraudulently.</p>
<p>Alongside credit monitoring, Apollo is providing access to Cyberscout, a service that offers what the notification describes as &#8220;proactive fraud assistance.&#8221; Cyberscout&#8217;s model typically pairs the monitoring alerts with a case manager who helps a victim work through the practical steps of freezing credit, disputing fraudulent accounts and replacing compromised identity documents if fraud does occur, rather than leaving individuals to navigate that process alone. Enrollment is time-limited, with individuals given 90 days from the date of the letter to sign up. Apollo reported $938 billion in assets under management at the time of disclosure; the firm&#8217;s total has continued to grow since, underscoring just how much sensitive client and deal data now sits behind the credentials these attackers are after.</p>
<p>Credit monitoring and identity protection are a reasonable, and now fairly standard, response once a breach involving Social Security numbers has already happened. But they are a remedy for affected individuals after the fact. They do nothing to close the gap that let the attackers in, and boards at other financial services firms are increasingly asking a harder question: what would have stopped this before it started.</p>
<h2>How firms are hardening themselves before an incident</h2>
<p>Financial services firms outside the private equity and asset management space have already had to answer that question, and the steps they&#8217;ve taken are instructive. In a recent case study on this site, building products supplier Lambson used a <a href="https://www.networksjournal.com/content/lambson-building-products-penetration-test-cloud-overhaul" target="_blank" rel="nofollow noopener">penetration test to identify weaknesses in its cloud environment</a> and worked through a structured cloud security overhaul before those weaknesses could be exploited. Separately, packaging manufacturer Allpack put in place <a href="https://www.networksjournal.com/content/allpack-protects-growing-workforce-with-automated-dark-web-monitoring" target="_blank" rel="nofollow noopener">automated dark web monitoring</a> to catch employee and customer credentials that had already leaked, before they could be used against the company in exactly the kind of credential-based attack now being used against private equity firms.</p>
<p>Both cases point to the same underlying principle: the most damaging attacks against enterprises today rarely start with a sophisticated exploit. They start with a stolen or guessed credential, or with an employee talked into handing one over. Firms that test their own defenses against that reality, rather than assuming their perimeter security is enough, are the ones catching these gaps before an attacker does.</p>
<h2>Remedies for individuals: what to do if you&#8217;ve been affected</h2>
<p>For individuals who receive a breach notification like Apollo&#8217;s, or who suspect their data may be involved in this campaign, security practitioners generally recommend:</p>
<ul>
<li><strong>Enroll in the credit monitoring offered.</strong> Where a company the size of Apollo offers free monitoring through a service like Cyberscout, enrolling within the stated window costs nothing and provides an early warning system for fraudulent activity.</li>
<li><strong>Place a credit freeze with all three major credit bureaus</strong> (Equifax, Experian and TransUnion), not just the monitoring service offered by the breached company. A freeze blocks new lines of credit from being opened in your name until you lift it, and is free to place and remove.</li>
<li><strong>Watch for follow-on phishing.</strong> Breached personal data, including names, birth dates and addresses, is commonly used to make subsequent phishing or vishing attempts against the same individuals more convincing. Treat unexpected calls or emails referencing personal details with added scrutiny, particularly anything claiming to be from a bank, the IRS, or an employer&#8217;s IT department.</li>
<li><strong>File an identity theft report</strong> with the Federal Trade Commission at IdentityTheft.gov if you notice any signs of fraudulent activity, which creates a recovery plan and supporting documentation for disputing fraudulent accounts.</li>
</ul>
<h2>How to avoid becoming the next headline</h2>
<p>For financial services firms looking to avoid being the next name in a breach notification, the tactics used against Apollo and its peers point directly to the defenses that would have blunted them:</p>
<ul>
<li><strong>Move to phishing-resistant, FIDO2-based authentication</strong> rather than one-time passcodes or app-based push notifications, which can be defeated by adversary-in-the-middle (AiTM) phishing kits, tools that sit between a victim and a real login page to intercept credentials and session tokens as they&#8217;re entered in real time.</li>
<li><strong>Tighten IT helpdesk identity verification.</strong> Because these attacks rely on convincing an employee that the caller genuinely is internal IT, requiring a second, independent verification step, such as a callback to a known number or verification through a manager, before any password reset or MFA re-enrollment, closes the exact opening these attackers use.</li>
<li><strong>Shorten session lifetimes and enforce re-authentication</strong> for sensitive systems, so that a stolen session token has a smaller window in which to be useful to an attacker.</li>
<li><strong>Centralize authentication through single sign-on</strong> so that security controls, monitoring and anomaly detection apply consistently across every application employees use, rather than varying system by system.</li>
<li><strong>Run regular social engineering simulations</strong> against staff, including phone-based pretexting, not just email phishing tests, since this campaign&#8217;s primary technique is a phone call, not an email.</li>
</ul>
<h2>What happens next</h2>
<p>According to Google security researchers, who published detailed <a href="https://cloud.google.com/blog/topics/threat-intelligence/unc6671-targets-financial-services-and-enterprise-cloud-environments" target="_blank" rel="nofollow noopener">threat intelligence on this campaign</a> earlier this month, the group behind it, tracked as UNC6671 and operating under the aliases Falcon, Helix, Pink and Redact, has been steadily shifting its focus toward higher-value targets. Google&#8217;s researchers describe the group&#8217;s targeting moving from manufacturing, real estate, healthcare and insurance in the spring, to technology and intellectual property-heavy targets by early summer, and then specifically to financial services, private equity and law firms by July, sectors the researchers note are attractive for their mergers and acquisitions activity, capital deployment decisions and sensitive litigation data.</p>
<p>The technique itself has stayed consistent throughout: calls to employees&#8217; personal mobile phones, impersonating IT helpdesk staff with an urgent pretext, most often a mandatory multi-factor authentication or passkey enrollment update, that directs the employee to a convincing but fake login page. Once credentials and authentication codes are entered there, the attackers use adversary-in-the-middle infrastructure to capture and reuse the live session, giving them access without ever needing to guess a password or exploit a software vulnerability.</p>
<p>Google&#8217;s researchers also noted that the group&#8217;s domain registration activity accelerated through June and July, with new lookalike domains appearing roughly once every 1.6 days by mid-summer, up from once every 2.2 days earlier in the year, a sign the campaign shows no indication of slowing down. For financial services firms managing sensitive client and deal data, the message from researchers is that the exposure isn&#8217;t hypothetical: it is an active, ongoing campaign that has already reached several of the largest names in the industry.</p>
<h2>Who can help</h2>
<p>Firms looking to test their own exposure to this style of attack before an incident, rather than after, typically start with the same categories of service Apollo and its peers are now being asked about publicly. <a href="https://www.digitalxraid.com/?source=NetworksJournal.com" target="_blank" rel="noopener nofollow">DigitalXRAID</a>, a UK-based cybersecurity company, offers a dedicated social engineering testing service that simulates phishing and pretexting attempts against a workforce and follows up with targeted training to close any gaps identified, alongside broader penetration testing, red teaming, and a 24/7 CREST-accredited security operations centre for firms that want ongoing monitoring and incident response instead of a one-off test.</p>
<p>For an industry built on protecting other people&#8217;s capital, the lesson from this summer&#8217;s campaign is a simple one: the weakest point in a financial services firm&#8217;s security is rarely its software. It&#8217;s the phone call an employee didn&#8217;t expect to have to question.</p>


What Is Noised Magazine?

More from Noised

Join the CIOs, CTOs and CISOs who rely on our insights.