CybersecurityNovember 14, 20263 min readBy Peter OlaleruEditor

Microsoft 365 Outage: A Capacity Upgrade, Not a Hack, Took Down Outlook and Teams in 74 Countries

Microsoft restored Microsoft 365 services after a network capacity upgrade issue disrupted Outlook, Teams and Copilot across 74 countries for over 24 hours.

TweetLinkedIn
Report an issue
Microsoft 365 Outage: A Capacity Upgrade, Not a Hack, Took Down Outlook and Teams in 74 Countries
Photo: Unsplash

Microsoft restored Microsoft 365 services on Saturday after a network capacity upgrade issue disrupted Outlook, Teams and Copilot across 74 countries for more than 24 hours, the company said.

Microsoft ruled out cyberattacks or AI agents, attributing the disruption to a network capacity upgrade issue and directing customers to incident MO1550821 in the Microsoft 365 admin center. The company said there was no indication the outage resulted from malicious or cyber activity.

The outage was first reported by Microsoft early Thursday afternoon. Within an hour, Downdetector logged more than 100,000 reports. Microsoft initially described an access issue in the Americas, then said the issue could affect Microsoft 365 service connectivity in any region.

By Friday morning, Microsoft reported broader improvements in North America, sustained improvements across much of Europe, and encouraging recovery elsewhere. On Saturday, the company said services had fully recovered across Teams, Outlook and other products. Microsoft apologized for the disruption.

The outage disrupted communications across industries. Businesses, governments, schools and healthcare providers reported disruptions, according to reports compiled during the incident.

It was a capacity upgrade that went wrong at a single cloud provider, and it took more than a day to fully resolve. That is the operational reality of concentrated infrastructure: one technical fault at one company can interrupt work, government services and healthcare communication across dozens of countries.

For security teams, the incident is a reminder that availability risk does not require an adversary. A configuration or capacity change can produce the same disruption as an attack, and the response playbook — incident tracking, regional recovery sequencing, customer communication — looks similar. Microsoft directed customers to incident MO1550821 in the Microsoft 365 admin center for updates.

Sources

  1. [1]newscord.org
  2. [2]newscord.org
  3. [3]detroitnews.com
  4. [4]abcnews.com
Peter Olaleru

Editor

Peter Olaleru

Peter is the editor of Measured Take and a cybersecurity professional. He leads our news, fact checks and sport from around the world, with a particular eye on cyber attacks, data breaches, scams, AI and misinformation.

TweetLinkedIn

Reader notes

Loading comments...