Story perspectives
Microsoft 365 Bug Exposes Confidential Emails, Fix Underway
3/2/2026
1 of 1
Story summary
- A bug in Microsoft 365 Copilot allowed the AI assistant to summarize confidential emails, bypassing Data Loss Prevention (DLP) policies.
- Microsoft began deploying a fix after late January and has not disclosed how many organizations were affected.
- Security experts urge companies to reassess their AI integration with compliance controls.
- Users should review Copilot access settings, validate DLP policies, and monitor activity logs to protect data.
