Microsoft's Single-Vendor Chokepoint Takes Down UK Police, NHS, and Government in Hours

A Microsoft 365 outage cascades across UK critical infrastructure — police can't receive crime reports, NHS email and Teams go dark, ambulance services face backlogs — exposing the systemic fragility of monoculture cloud dependency.

A major Microsoft 365 outage that began early Friday morning has knocked email, Teams, and online services offline across UK police forces, the NHS, schools, stock exchanges, and central government. Microsoft reports "incremental improvement" but admits service capacity has not returned to baseline. The company has extended its email timeout window to 48 hours to prevent message loss, and says it is not aware of any malicious activity causing the incident.

The NHS is bearing the sharpest operational pain. Sources describe "widespread" and "serious" disruption, with staff unable to access email or IT systems used to deliver care. Pharmacies report they cannot communicate with GP surgeries about prescriptions, creating "significant" patient waiting times for medicines. Remote therapy sessions conducted via Teams are disrupted. The Central and North West London NHS Foundation Trust, NHS Grampian, and Pennine Care NHS FT all issued public warnings, though clinical and operational systems — separate from Microsoft's infrastructure — appear to be functioning. Ambulance services are affected too. The GMB union reports that 111 and 999 staff are unable to refer patient details normally, creating what it calls a "massive backlog" with "potential for chaos." Emergency and life-threatening callouts appear unaffected, but the degradation of routine referral pathways is precisely the kind of quiet systemic risk that compounds over hours. UK police forces including Hertfordshire and Dorset have told the public to stop submitting crime reports online and call 101 or 999 instead. The UK Insolvency Service reports email failures. Euronext, which runs stock exchanges in seven European cities, told listed companies to use the telephone for corporate filings. The UK government says contingency plans are in place across Whitehall, with Defence Minister Luke Pollard confirming government engineers are working with Microsoft. Microsoft's share price dropped 2.6% in pre-market trading — a modest financial hit for a company of its scale, but the reputational exposure is real. Amish Patel of Raymond James captured the structural paradox neatly: "The same market dominance that makes Microsoft such an attractive business also magnifies the consequences when things go wrong." The direct financial impact may be negligible for Microsoft. The cost to NHS patients waiting for prescriptions, to crime victims unable to file reports, and to ambulance staff manually routing referrals is not. The root cause remains undisclosed. Microsoft's status updates describe recovery in phases — traffic drain, restart, remediation, staged return-to-service — language that suggests infrastructure-level failure rather than a simple application bug. A post-incident report with root cause analysis has been promised. What is already clear is that the UK's public sector has concentrated an extraordinary volume of critical communications infrastructure onto a single vendor's platform, with NHS England's five-year Microsoft 365 deal being the most prominent example. This is not a technology story. It is a procurement and resilience story. Every organisation that lost email and Teams this morning made the same bet: that Microsoft's uptime would be sufficient, that contingency plans would bridge any gap, and that the switching costs of diversification were not worth paying. For a few hours on a Friday morning, the entire cost of that bet became visible.