Microsoft Provided FBI with BitLocker Recovery Keys for Investigation in Guam

Microsoft reportedly provided the FBI with recovery keys to access data on three laptops encrypted with BitLocker as part of a federal investigation into suspected fraud related to the Pandemic Unemployment Assistance program in Guam. BitLocker is a full-disk encryption technology built into modern Windows computers and enabled by default, designed to prevent unauthorized access if a device is locked and powered off. However, Microsoft automatically uploads BitLocker recovery keys to its cloud, making them accessible to the company and, under certain circumstances, to law enforcement. According to Forbes, Microsoft receives an average of 20 requests per year for such recovery keys and sometimes complies. Security experts have raised concerns about the privacy implications of storing these keys in the cloud, warning that if hackers gain access to Microsoft’s infrastructure, they could potentially misuse the keys, although physical access to the devices would still be required. The situation highlights ongoing debates over encryption, privacy, and law enforcement access to encrypted data, particularly when cloud storage is involved.