Sensitive UK police data vulnerable to ‘compromise’ by US government and foreign actors
Exclusive: Official UK security assessment found Microsoft cloud platform storing files was at potential risk from hostile hackers Vast troves of highly sensitive police data are lying on Microsoft cloud platforms which an official UK security assessment deemed to be vulnerable to “compromise” by foreign actors and the US government, a Guardian investigation can reveal. The files include criminal…
A UK security assessment revealed that Microsoft's cloud platform, Azure, storing police data is at risk of being compromised by foreign actors and the US government. The highly sensitive files include criminal records, victim statements, and internal emails from over 40 police forces across the UK. Some files may even be classified as "secret" or "top secret."
The cloud platform, one of Microsoft's main commercial offerings, operates on a global network spanning over 100 countries. In 2017, police officers agreed that US government insiders could access the data and it could be transmitted worldwide, though the extent of this is unknown. Experts reviewing the Guardian's findings say the risks identified in the document still apply today.
Police forces now rely heavily on Microsoft Azure, and the UK government spends a significant amount on Microsoft software annually. While the police and government claim there are no security concerns, Microsoft has admitted that data can go outside the UK and does not guarantee data sovereignty.
Written by urgent.news from Guardian Technology's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
