The facts
A Guardian investigation has revealed that an official UK security assessment determined sensitive police data stored on Microsoft Azure cloud platforms is vulnerable to compromise by foreign actors and the US government. The data includes criminal records, victim statements, internal emails, intelligence, body-camera video, digital evidence, and case files from more than 40 UK police forces. Some files are classified above 'official' levels, potentially reaching 'secret' or 'top secret'. The assessment, conducted after a 2017 decision to move data to Microsoft's cloud, warned that information and metadata could be processed or stored worldwide with an unknown extent. Specialists reviewing the findings told The Guardian that these risks persist. Microsoft stated it has not provided UK government data to authorities and that customer data is protected by guardrails and legal commitments. However, the report notes that Microsoft engineers and legal experts have disputed whether these assurances fully eliminate the risks. Every UK police force now uses Azure, and the UK government spends at least £1.9 billion annually on Microsoft software. The assessment identified risks including exploitation by cybercriminals and access by 'US government insiders,' with concerns that data could be transmitted and stored globally by Microsoft.
Our take
Well, shit. In a move of such staggering incompetence it could only be government work, the UK's finest decided the perfect digital evidence bag for the nation's most sensitive police data was a fucking Microsoft server. Not just any data. We're talking the whole shop: criminal records, statements from victims of horrific crimes, internal emails, intelligence, body-camera footage, and case files from over forty fucking forces. Some of this material is classified 'secret' or 'top secret.' And where did they chuck it? Onto Microsoft Azure, a cloud platform whose very design means your data and its metadata can be processed or stored on any bastard server Microsoft owns worldwide. The official assessment, finally dragged into the open, explicitly warned this made everything vulnerable to 'US government insiders' and foreign state actors. So every time some desk sergeant uploads a statement from a traumatized kid, it's essentially being filed in a global cabinet with a sticky note for the CIA.
Microsoft's response is the usual corporate bullshit: 'guardrails' and 'legal commitments.' The fucking report notes that Microsoft's own engineers and lawyers have argued internally about whether those promises are worth a piss in the wind. It doesn't matter. The deed is done. The UK government is now locked into this catastrophe, shoveling at least £1.9 billion of taxpayer money every year into Microsoft's coffers for software and services. Every single police force in the country is now addicted to this Azure drip feed, meaning there's no way back. They've outsourced their entire operational memory to a company that answers to a foreign power.
The assessment didn't stop at waving at the Yanks. It also flagged the risk of exploitation by cybercriminals. So it's a beautiful fucking bargain: a detailed informant file on a major gangland figure could be casually browsed by a US intelligence analyst, or simultaneously be packaged and sold on a dark web forum by some Romanian dickhead. One subscription, two terrifying audiences. The UK police have created a universal access pass to their crown jewels, paid for on a rolling contract. The monumental idiocy of moving this category of hyper-sensitive information onto a global commercial cloud, owned by an American corporation bound by US surveillance laws like the CLOUD Act, isn't an oversight - it's a fucking policy choice. They installed a skylight in the evidence room and called it innovation.
So here's the proud result. The institution tasked with protecting public security has instead engineered a sprawling, digital crime scene where the primary evidence is its own glorious fuck-up. The intimate details of victims and the secrets of criminal investigations are now adrift in a planetary data slurry, with no real certainty about who can peek at it or which country's soil the hard drives are under. Microsoft's shareholders get fatter, hostile governments get a potential intelligence windfall, and the British public gets the warm, fuzzy certainty that their most private horrors are just another asset in a transnational data portfolio. It's not cloud computing. It's a fucking betrayal-as-a-service.
