Story perspectives

Microsoft 365 Bug Exposes Confidential Emails, Fix Rolling Out

2/20/2026

Summary

Story summary

Microsoft confirmed a bug in its 365 Copilot, CW1226324, identified on January 21, 2026, that allowed unauthorized access to confidential Outlook emails by bypassing Data Loss Prevention policies.
The flaw affected emails in Sent Items and Drafts, including confidential ones.
Microsoft began rolling out a fix in February.
The number of affected users or organizations has not been disclosed.
The European Parliament has disabled AI tools on official devices.

History

Historical Context

The 2016 settlement between the U.S. Federal Trade Commission and Uber over a data breach affecting 57 million users underscored significant vulnerabilities in data protection. This incident, alongside Microsoft's recent bug in its 365 Copilot, reflects ongoing cybersecurity challenges. The European Parliament's decision to disable AI tools on official devices further highlights the urgent need for robust data privacy measures in today's digital landscape.

1 of 2

Story summary

Microsoft confirmed a bug in its 365 Copilot, CW1226324, identified on January 21, 2026, that allowed unauthorized access to confidential Outlook emails by bypassing Data Loss Prevention policies.
The flaw affected emails in Sent Items and Drafts, including confidential ones.
Microsoft began rolling out a fix in February.
The number of affected users or organizations has not been disclosed.
The European Parliament has disabled AI tools on official devices.

1 / 2