Microsoft's Single-Vendor Dependency Exposed the UK's Entire Public Infrastructure in One Morning

A Microsoft 365 outage cascaded across NHS hospitals, courts, police, and housing — revealing that critical UK public services share a single digital chokepoint with no operational redundancy.

On Friday morning, a global Microsoft outage shut down email, calendaring, file access, and collaboration tools across the UK's most critical public services. The NHS, which routes more than 1 million staff through Microsoft-powered NHS.net Connect, experienced what senior health sources called "serious" and "widespread" disruption. Hundreds of hospitals, GP surgeries, and community health services could not log in, send referrals, or access patient data. Some staff reverted to paper records. Operations and appointments were cancelled. Urgent cancer referrals went unsent.

The court system seized up from magistrates' level to the supreme court. Crown court cases were abandoned mid-trial; a judge at Minshull Street crown court sent jurors home and staff hunted for a fax machine. Family court judgments that are normally emailed were delayed until Monday. The Scottish Courts and Tribunals Service reported delays across civil and criminal proceedings. Police forces reported that online crime-reporting services went down, though 999 emergency lines remained operational. Back-office functions — HR, communications, internal email — were the primary casualties. The Metropolitan Police activated business continuity plans. One force found 80 emails waiting when service resumed, none urgent. Officers who missed court appearances due to the outage may now need to reschedule, pulling them from regular duties. The property industry scrambled on what is traditionally the most popular day for house completions. Two customers of a Kent removals firm had their moves disrupted before eventually proceeding. Estate agents advised clients to use telephones or hand-deliver documents. The email-based contract exchange stage was more vulnerable than physical completions, though purpose-built portals used by some agents and lenders were unaffected. The pattern is unmistakable: a single vendor's cloud platform — Microsoft 365 — underpins email, scheduling, file sharing, and collaboration for the NHS, the judiciary, policing, and large swathes of private commerce. When it fails, every downstream system fails simultaneously. Paper records, phone calls, and fax machines are not contingency plans — they are admissions that no real contingency exists. NHS England's statement that "longstanding measures" were enacted to manage IT outages rings hollow when those measures amount to pulling paper charts and asking patients to phone in. The full impact on delayed cancer referrals, missed diagnoses, and rescheduled court proceedings will take days to quantify. The structural question is whether any of this leads to genuine multi-vendor resilience or whether it is absorbed as a one-off inconvenience. This is a stress test that the UK's digital public infrastructure failed. Not because any single system collapsed catastrophically, but because every critical service degraded at once through the same dependency. The next outage — or a targeted attack on the same surface — would produce identical results unless the monoculture is addressed.