20pc of computers in GMP open to hacking

FORCE STILL RUNS AGEING SOFTWARE VULNERABLE TO ATTACK BY CRIMINALS

ONE in five of Greater Manchester Police’s computers was still using Windows XP this summer - despite it being vulnerable to hackers.

Some 1,518 of the force’s PCs - 20 per cent of the total - ran the ageing operating system as of July, according to new figures.

However, bosses say they have now replaced 90 per cent of their Windows systems.

Microsoft stopped supporting Windows XP, which is believed to be vulnerable to hackers, in 2014.

GMP said it still used the operating system because it was required for a small number of specialised apps but was working to update their systems so officers can finally stop using Windows XP.

The force’s use of the ailing operating system was revealed in a Freedom of Information Act request by the BBC.

GMP officers have long complained about the force’s IT systems.

“Even if security vulnerabilities are identified in XP, Microsoft won’t distribute patches in the same way it does for later releases of Windows,” Dr Steven Murdoch, a cyber-security expert at University College London, told the BBC.

He continued: “So, if the [police’s] Windows XP computers are exposed to the public internet, then that would be a serious concern.

“If they are isolated, that would be less of a worry - but the problem is still that if something gets into a secure network, it might then spread. That is what happened in the NHS with the recent Wannacry outbreak.”

Malware known as Wannacry caused severe problems to the National Health Service’s computer systems earlier this year, scrambling files to make them inaccessible.

Operations and appointments were cancelled.

A GMP spokesperson said: “A forcewide project has been undertaken to replace Windows XP, with 90 pc of the windows estate being successfully replaced.

“The remaining XP machines are still in place due to complex technical requirements from a small number of externally provided highly specialised applications.

“Work is well advanced to mitigate each of these special requirements within this calendar year, typically through the replacement or removal of the software applications in question.

“The decision to share the figures on this has been made as the simple numerical response would not pose a significant increase to our organisational risks.”

Most police forces refused to provide answers.