Microsoft: No malicious activity behind global outage

A major outage affecting Microsoft 365 services has disrupted operations across governments and organizations globally since November 12. Microsoft has stated that there is no evidence of malicious activity behind the incident, though the company continues working to fully restore service.

The disruption began around 12:30 pm ET and has impacted a broad range of Microsoft services. Exchange Online, the backend system handling email, calendars, and related functions, appears to be at the center of the problem. The outage has affected numerous institutions, including parts of the UK government, which experienced difficulties sending and receiving emails. The UK's National Health Service reported being unable to access online consultation services for patients. Government agencies in the United States and other countries have also been impacted.

The list of affected services is extensive and demonstrates the widespread reliance on Microsoft's infrastructure. Impacted products include the Microsoft 365 admin center, various applications, education features, Copilot, Defender for Office 365, Defender XDR, Fabric, Graph, Intune, Planner, Power Apps, Purview, portions of Teams, To Do, SharePoint Online, Universal Print, and Windows 365. This breadth of disruption underscores why the outage has proven so consequential for institutions and companies that depend on these tools for daily operations.

Microsoft's latest statement indicated that recovery efforts were progressing in phases across affected infrastructure. Global telemetry and customer reports showed incremental improvement in several services, though overall health remained variable and capacity had not yet returned to normal levels. The company maintained active network and traffic-management measures while prioritizing email queue and backlog processing. To preserve delayed messages during recovery, Microsoft extended the email timeout window to 48 hours.

The company's assurance that no malicious activity has been detected provides some reassurance, though it does not diminish the severity of the disruption. The incident highlights a persistent vulnerability in modern digital infrastructure: the concentration of critical services among a small number of large providers. Similar widespread outages have occurred previously, including a major Amazon Web Services disruption last year and recent issues stemming from PHP vulnerabilities, demonstrating that even established, typically reliable companies remain susceptible to significant service failures.

Microsoft committed to treating the situation with urgency until full recovery is achieved. The company indicated it would publish a comprehensive post-incident report detailing the root cause and defensive measures implemented following complete mitigation. As recovery efforts continued, the outage served as a reminder of the risks inherent in depending on centralized digital infrastructure for essential government and business functions.