Microsoft handed the government ecryption keys for customer data

"In this instance, however, it seems that Microsoft has decided to bow to government demands and confirmed to that it "does provide BitLocker recovery keys if it receives a valid legal order." Microsoft spokesperson Charles Chamberlayne told The Verge that Microsoft is legally required to produce the keys stored on its servers. Chamberlayne ellaborated saying, "customers can choose to store their encryption keys locally, in a location inaccessible to Microsoft, or in Microsoft's cloud. We recognize that some customers prefer Microsoft's cloud storage so we can help recover their encryption key if needed. While key recovery offers convenience, it also carries a risk of unwanted access.""

"Senator Ron Wyden of Oregon countered, telling Forbes that it was "irresponsible" for companies to "secretly turn over users' encryption keys." What alarms privacy advocates like the ACLU is the precedent this sets and the potential for abuse. The current administration and ICE have shown little respect for data security or the rule of law. And beyond American borders, Jennifer Granick, surveillance and cybersecurity counsel at the ACLU, told Forbes that "foreign governments with questionable human rights r"

The FBI sought Microsoft's BitLocker recovery keys for three laptops in a COVID unemployment assistance fraud investigation in Guam, and Microsoft complied. Microsoft stated that it provides BitLocker recovery keys when it receives a valid legal order and is legally required to produce keys stored on its servers. Customers may store encryption keys locally or in Microsoft's cloud; cloud storage enables recovery but increases the risk of unwanted access. Senator Ron Wyden criticized secret key handovers as irresponsible. Privacy advocates, including the ACLU, warned that such compliance creates a dangerous precedent and risks misuse domestically and abroad.

Read at The Verge