Highly sensitive UK police data stored on Microsoft Azure is vulnerable to compromise by foreign actors and the US government, according to a Guardian investigation. The files include criminal records, victim statements, internal emails, and sensitive information held by more than 40 police forces across the UK.
The Extent of the Data Vulnerability
Some files exceed the 'official' classification, raising the possibility they could be classed as 'secret' or 'top secret'. The cloud platform in question is Microsoft Azure, one of the main commercial offerings of the US tech company. It is used by businesses and governments globally and rests on a web of IT infrastructure that spans more than 100 countries.
Find Bleeding Edge Supplements at Scandalous Prices on iHerb.
In recent years, doubts have surfaced about how cloud platforms store data and whether they are truly secure. British police decided to put some of their most sensitive data on the Microsoft platform in a 2017 meeting. In doing so, officers accepted that 'US government insiders' would be able to see the data, and that it could be 'transmitted worldwide', with 'the extent of this … unknown'.
Key Takeaways
- UK police data on Microsoft Azure is at risk of compromise by foreign actors and the US government.
- Data includes criminal records, victim statements, and internal emails from over 40 police forces.
- Some files may be classified as 'secret' or 'top secret'.
- Officers accepted in 2017 that US government insiders could access the data.
- Experts highlight the need for stronger data security measures.
Comparison of Cloud Security Risks
| Cloud Provider | Data Sovereignty | Vulnerability to Foreign Actors | US Government Access |
|---|---|---|---|
| Microsoft Azure | Limited | High | Yes (via CLOUD Act) |
| AWS | Limited | High | Yes (via CLOUD Act) |
| Google Cloud | Limited | High | Yes (via CLOUD Act) |
| UK Sovereign Cloud | Full | Low | No |
Implications for Data Security
The findings raise serious concerns about the security of sensitive data stored on commercial cloud platforms. The US CLOUD Act allows US law enforcement to access data stored by US companies, even if it is held outside the US. This means that any data stored on Microsoft Azure, regardless of where it is physically located, could be subject to US government access.
Five specialists who reviewed the Guardian's findings said the risks identified in the document persist. They highlight the need for stronger data security measures, such as encryption and data localisation, to protect sensitive information from foreign actors.
FAQ
What data is at risk?
Criminal records, victim statements, internal emails, and other sensitive information held by over 40 UK police forces.
Who could compromise the data?
Foreign actors and the US government, according to an official UK security assessment.
What is Microsoft Azure?
Microsoft Azure is a cloud computing platform used by businesses and governments globally to store and manage data.
As cloud adoption continues to grow, it is crucial for organisations to understand the risks and take steps to mitigate them. The UK police data vulnerability serves as a wake-up call for all entities handling sensitive information.
Browse the Shop
Acacia frida deluxe solid wood bed frame |
Bedroom bench |
Bed chest drawers |
Lingerie dresser |
Frame base |
Mirror with jewelry storage |
30 Bathroom Vanity |
Memory foam queen mattress |
Mattresses for back pain |
Nightstand set of 2 |
Grand Goldman Shop |
Civil Lawyer
Deutschland Trikot WM 2026
