UK Lawmakers Press Apple and Google Over Stolen Smartphone Protections UK legislators grilled Apple and Google in a House of Commons hearing over their failure to implement measures that would allow stolen smartphones to be remotely locked, reset, or blocked from accessing cloud services—a request repeatedly made by the Metropolitan Police. During the session, MPs expressed frustration over what they perceived as resistance from the tech giants, suggesting commercial incentives may be influencing their stance. Apple and Google, however, argued that such measures could introduce new fraud risks, including account takeovers and blackmail attempts. The Scale of the Problem The Met Police reported a sharp rise in smartphone thefts, with 80,000 devices stolen in London in 2024—up from 64,000 in 2023. Apple devices account for roughly 80% of stolen phones, with an estimated annual replacement value of £50 million ($67 million). Most stolen devices are funneled through criminal networks and resold abroad, primarily in Algeria, China, and Hong Kong. Current Limitations While the GSMA industry association allows stolen phones to be blocked at a network level using their IMEI (International Mobile Equipment Identity) numbers, this only covers about 10% of global networks. The Met Police has proposed an international cloud-level block, where reported stolen devices would be barred from accessing Apple or Google services. Security experts argue this could drastically reduce resale value and theft incentives. Industry Responses Apple’s Gary Davis acknowledged the risks of IMEI-based blocking, citing concerns over fraud vectors, including impersonation attacks that could lead to account deletions or blackmail. Google’s Simon Wingrove noted that Android devices can already be locked or wiped via the Find My Device app, but it remains unclear whether this prevents stolen phones from being reused with new accounts. Potential Solutions Dion Price, CEO of Trustonic—a company that provides remote locking for supply chain distributors—suggested a government-regulated system using IMEI data already collected for trade and tax purposes. Such a system could enable near-instant global locking of stolen devices, but only if phones are registered at first activation. The debate highlights the tension between security, user protection, and commercial interests as lawmakers push for stronger anti-theft measures.

DC Metropolitan Police Department was affected by a cyber attack on may 2021. Twenty-two officers’ applicant files were in an archive that was 165 MB compressed. This was in addition to the first small dump the threat actors made with 5 other officers’ applicant files. It was revealed that the ransom demand was $4 million USD, and that the police department’s supposedly final offer was $100,000.00 which was rejected by the hacker group. They also uploaded a new archive of files that appears to be 22.7 GB in size, hackers indicated that they had downloaded 250 GB of data, so this is allegedly another partial dump.

Metropolitan Police Department suffered a cyber attack by Babuk Locker that led to a breach of its server. An unauthorized accessed on its server compromised the DC Police’s networks and stole 250 GB of unencrypted files. The ransomware gang also posted screenshots of various folders allegedly stolen in the attack, with the folder names looking like they are containing a lot of files related to operations, disciplinary records, and files related to gang members and ‘crews’ operating in DC