Tech News

Microsoft Investigating Teams and Exchange Online Services Disruption Impacting Users

Microsoft experienced a significant service disruption affecting multiple Microsoft 365 services, including Teams and Exchange Online, impacting users globally whose requests were routed through the affected infrastructure. The company has confirmed that all services have now recovered following swift mitigative actions.

The disruption primarily affected three core Microsoft services, causing widespread inconvenience for business users worldwide. Exchange Online users faced the most severe impacts, with many unable to access their mailboxes entirely.

System administrators encountered additional challenges, finding themselves unable to provision new Exchange Online mailboxes during the outage period.

Microsoft Teams users experienced significant collaboration disruptions, unable to create essential group scenarios, including chats, channels, and Teams. Perhaps more frustratingly for remote workers, users’ status information became stale, preventing colleagues from determining availability and potentially hampering communication workflows across organizations.

The disruption extended beyond these primary services to affect Microsoft Purview and Microsoft Defender for Office users, who encountered intermittent authentication failures when attempting to access solution tabs and features within the respective portals. This security-related impact added another layer of concern for enterprise customers relying on these platforms for compliance and threat protection.

Root Cause and Microsoft’s Response

Microsoft’s investigation revealed that a recent traffic management update, originally designed to improve service control and performance, proved to be overly aggressive in its implementation. This update unintentionally disrupted normal service traffic patterns, creating a cascading effect that impacted end users across multiple services.

The company’s response timeline demonstrates its incident management capabilities. Initially investigating user reports within 30 minutes of widespread complaints, Microsoft quickly identified the problematic change and implemented a reversal strategy. The tech giant confirmed that they had reverted the problematic update and were actively monitoring service recovery.

Throughout the incident, Microsoft maintained regular communication with affected users, providing quick updates designed to keep stakeholders informed of progress. Their telemetry systems indicated that the majority of impacted scenarios recovered relatively quickly following the corrective actions.

Microsoft has acknowledged the severity of this disruption and is taking steps to prevent similar incidents. The company announced that they are reassessing their traffic management update test parameters to ensure that similarly impacting updates are not introduced in the future.

As part of their commitment to transparency, Microsoft has committed to providing a preliminary Post-Incident Report within two business days, followed by a comprehensive final Post-Incident Report within five business days. This documentation will likely provide deeper insights into the technical details and additional preventive measures being implemented.

The incident serves as a reminder of the critical dependency modern businesses have on cloud-based communication and collaboration platforms, highlighting the importance of robust testing procedures for infrastructure updates.

Live Credential Theft Attack Unmask & Instant Defense – Free Webinar

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

4 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

5 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

5 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago