UK police data on Microsoft cloud deemed vulnerable to foreign and US government compromise

A recent official UK security assessment has identified Microsoft’s cloud platform, used to store files for more than 40 police forces, as being vulnerable to “compromise” by hostile actors, including foreign governments and the United States. The review, referenced in a Guardian investigation, found that the platform holds extensive volumes of highly sensitive police data—ranging from criminal records and victim statements to internal emails and other confidential information—raising concerns about potential unauthorized access.

The assessment underscores the need for heightened safeguards around the storage of law‑enforcement data on third‑party cloud services. While the specific details of the vulnerabilities have not been disclosed, the findings have prompted calls for immediate remedial actions to protect the integrity of the information and to mitigate the risk of exploitation by state‑backed hackers. Authorities are expected to review security protocols and consider alternative storage solutions to ensure the continued confidentiality of police records.