When loaded while logged into a standard BBC account, the endpoint served a fully produced, 45-second animated birthday video. The video featured the beloved Wallace & Gromit characters (Aardman Animations, a long-time BBC partner) singing a custom “Happy Birthday” song, with the name “Sage” integrated into the lyrics, alongside floating numbers 24, 05, 25.
For a period of roughly 48 hours, the phrase became one of the most searched strings on technical forums, Reddit, and Twitter (now X). What was it? Why was it “patched”? And who, or what, is “Sage”?
However, they hardcoded the date “24 05 25” into a global parameter without IP whitelisting. When a user stumbled upon the endpoint via a Google dork ( site:bbc.com intitle:bbcsurprise ), the surprise went viral. bbcsurprise 24 05 25 sage bbc birthday surprise patched
In the fast-paced world of digital entertainment and streaming service quirks, few things capture the public imagination like a hidden easter egg, a backdoor command, or—in the case of late May 2025—a genuine, time-sensitive surprise that the BBC neither planned nor wanted.
In short: what looked like a sweet Easter egg was actually a gateway to probing the BBC’s content delivery permissions. By late evening on May 24, 2025, investigative journalists and hobbyist OSINT (open-source intelligence) users identified “Sage” as Sage Aldridge , the 9-year-old daughter of Eleanor Aldridge , a senior commissioning editor for BBC Children’s Interactive. When loaded while logged into a standard BBC
The patch is permanent. The surprise, for those who saw it, was real. And somewhere in the BBC’s internal archives, a 45-second video of Wallace singing “Happy Birthday, Sage” remains as a testament to the fine line between personal and public on the internet.
The animation was not low-quality: professional voice acting, 4K resolution, and a credit roll mentioning “BBC Interactive – Special Projects.” What was it
/bbcsurprise?date=240525&user=sage