A recent investigation has revealed that significant amounts of sensitive data belonging to more than 40 UK police forces are currently stored on Microsoft cloud platforms. According to an official UK security assessment, this data is potentially susceptible to compromise by foreign entities and the United States government. The files in question contain highly sensitive material, including criminal records, victim statements, and internal police emails.

There is a notable disagreement regarding the classification of this data. While the information is generally categorized as 'official,' internal police documents reviewed during the investigation suggest that some of the stored files may actually reach 'secret' or 'top secret' classification levels. This discrepancy raises concerns about whether the current cloud storage infrastructure meets the security requirements necessary for such highly sensitive intelligence.

The investigation highlights a tension between the convenience of modern cloud computing and the rigorous security standards required for national law enforcement data. As police forces increasingly digitize their records, the reliance on third-party cloud providers like Microsoft has become standard practice. However, the security assessment suggests that this reliance may expose sensitive information to legal or technical vulnerabilities that were not previously fully accounted for. Neither the UK police authorities nor Microsoft have provided a comprehensive public response addressing how they intend to mitigate these specific risks or whether they plan to migrate the data to more secure, localized servers.