Microsoft Says ‘No Evidence of Malicious Activity’ in Global Outage of Outlook and Exchange Email as It Begins to Restore Services

Microsoft
Getty Images

In an update on Microsoft’s Service Health Status page Friday morning, the company did not explain what triggered the catastrophic outage but said that it did not suspect a cyberattack or other foul play.

“At this time, we have no evidence of malicious activity associated with this incident,” the company said in the update at 6:11 a.m. ET on Nov. 13. “We will continue to treat this with urgency until full mitigation, and we will share a full Post-Incident Report with root cause and defence-in-depth actions after mitigation is complete.”

Outlook and other Microsoft 365 services that interact with the Exchange Online and email services remained largely unavailable, but as of Friday some users had begun to regain access to their inboxes. The issues began affecting Outlook at around 12:30 p.m. ET on Thursday; both individual users and enterprise customers have been unable to access their email since then.

In a statement Friday morning provided to Variety, Charles Lamanna, EVP of Copilot, agents and platform at Microsoft, said: “We’re seeing encouraging recovery progress, with service availability and email delivery performance improving across a growing portion of affected infrastructure. We know our customers rely on our services to get important work done every day, and regret the impact these outages had on those who depend on us. Our teams are reviewing what happened and how we can prevent similar issues going forward.”

On Friday, Microsoft said that “We’ve made additional progress toward service recovery, with recovery actions completed across portions of the affected infrastructure in the Asia Pacific region. Traffic is being gradually restored, and we’re seeing improvements in key customer scenarios, including mailbox access and delayed email processing. However, some users may continue to experience intermittent issues.”

The tech company continued, “Our focus is now on extending these recovery actions across affected infrastructure in other regions, while continuing stabilisation efforts and adding supporting capacity to improve service consistency. Reducing email queues and backlogs remains a priority, and the extended 48-hour email timeout window remains in place to help protect delayed messages as delivery catches up.”

Love Film & TV?

Get your daily dose of everything happening in music, film and TV in Australia and abroad.

At 7 a.m. ET, Microsoft said in an update, “We’re seeing encouraging recovery progress in Europe, with service availability and email delivery performance improving across a growing portion of affected Microsoft 365 infrastructure. Japan remains comparatively more stable, while North America is also improving; however, some users may still experience intermittent issues as recovery actions continue.”

Applications and features of multiple Microsoft 365 services that interact with Exchange Online and email services were affected. Those included Outlook, the Microsoft 365 admin centre, Microsoft 365 apps (as users may be unable to view their recently used files); Microsoft Copilot 365; SharePoint Online; and Microsoft Teams (with respect to features that depend on Exchange Online, including calendar-related failures with scheduling, invites, viewing and meeting edits and creation of Live or Virtual events).

From Variety US