Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams

UPDATE – Microsoft 365 suffered a widespread outage Thursday, which has extended into Friday, disrupting access to business email and other cloud services across multiple regions. Microsoft initially reported that users in the Americas were having trouble connecting to Exchange Online mailboxes. It later identified potential disruption to Teams, SharePoint Online, Microsoft 365 Copilot, Defender XDR, and many other services.

Some users of Google Workspace (formerly G Suite) also reported trouble accessing their Google-hosted email through Outlook desktop and mobile email clients.

Microsoft traced the increased load on its infrastructure to a large number of servers becoming unavailable, leaving the remaining systems to handle the traffic. The company said overall traffic had not increased.

Update: November 12 – 9:00PM ET – Microsoft said restarting affected servers was showing signs of improvement, though it was still monitoring their stability and had yet to confirm full recovery.

Microsoft said a process that establishes secure connections was becoming overwhelmed, causing affected servers to stop handling requests. The company began rolling back a recent network configuration change that coincided with the start of the disruption and was monitoring whether the rollback helped.

Both the Exchange Online incident (EX1550543) and the broader Microsoft 365 incident (MO1550821) remained open in its service health dashboard. Features of many Microsoft 365 services that interact with Exchange Online and email services are impacted. Elements of those services that do not depend on interaction with Exchange Online remain functional, Microsoft said.

Microsoft said a process that establishes secure connections was becoming overwhelmed, causing affected servers to stop handling requests. The company began rolling back a recent network configuration change that coincided with the start of the disruption and was monitoring whether the rollback helped. Microsoft had yet to confirm the root cause or disclose evidence of a cyberattack.

In an update just before 3 p.m. ET, Microsoft said affected servers were failing automated health checks and that it was testing a workaround that bypasses the component responsible for processing those checks. The company said it was also investigating elevated processor usage on affected servers.

Was the Microsoft outage caused by a cyberattack?

At the original time of publishing, Microsoft was investigating what triggered the failures and disclosed no evidence of a cyberattack. In an update Friday, the company said there was no indication of a malicious attack. “At this time, we have no evidence of malicious activity associated with this incident,” the status page said. “We will continue to treat this with urgency until full mitigation, and we will share a full Post-Incident Report with root cause and defense-in-depth actions after mitigation is complete.”

The disruption came two days after Microsoft released its November Patch Tuesday updates, which addressed 1,094 vulnerabilities across its products. They included CVE-2026-124194, an Outlook spoofing flaw Microsoft says attackers have exploited. The flaw can expose a user’s authentication material if the user opens a specially crafted file in an affected Outlook client. Microsoft’s service advisories have not linked the vulnerability to the Exchange Online outage.

Microsoft is tracking the Exchange Online disruption under EX1550543 and the broader Microsoft 365 incident under MO1550821 in the Microsoft 365 admin center. As of just before 3 p.m. ET, both incidents were listed as service degradations.

This article was published by Security Week. Please check their website for the original content.