{"id":4214,"date":"2026-11-12T14:46:13","date_gmt":"2026-11-12T22:46:13","guid":{"rendered":"https:\/\/cyber.mag212.com\/microsoft-365-outage-outlook-teams-exchange-online-12-november-2026\/"},"modified":"2026-11-12T14:46:13","modified_gmt":"2026-11-12T22:46:13","slug":"microsoft-365-outage-outlook-teams-exchange-online-12-november-2026","status":"publish","type":"post","link":"https:\/\/cyber.mag212.com\/fr\/microsoft-365-outage-outlook-teams-exchange-online-12-november-2026\/","title":{"rendered":"Microsoft 365 Outage: Outlook, Teams and Exchange Online Down as Servers Fail Health Checks"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">If Outlook stopped loading this afternoon, it wasn\u2019t your computer, your password or your network. A large Microsoft 365 outage on Thursday, 12 November 2026 left users across the Americas and beyond unable to reach their mailboxes, and spread to Teams, SharePoint Online, Microsoft 365 Copilot and Defender XDR. Microsoft says the cause is a set of its own servers failing automated health checks, and so far there is no evidence of a cyberattack. Here is what happened, what Microsoft has said, and what users, IT teams and MSPs should do while service comes back.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>What<\/strong><\/td><td>Microsoft 365 connectivity outage centred on Exchange Online (business Outlook)<\/td><\/tr><tr><td><strong>When<\/strong><\/td><td>Thursday 12 November 2026; incident opened 16:17 UTC (8:17 a.m. PT), still listed as degraded at 22:11 UTC (2:11 p.m. PT)<\/td><\/tr><tr><td><strong>Services named by Microsoft<\/strong><\/td><td>Exchange Online, Teams, SharePoint Online, Microsoft 365 Copilot, Defender XDR; later Planner, To Do and Purview services<\/td><\/tr><tr><td><strong>Cause (per Microsoft)<\/strong><\/td><td>Servers failing automated health checks and becoming unavailable, straining the rest of the service<\/td><\/tr><tr><td><strong>Attack?<\/strong><\/td><td>No evidence disclosed<\/td><\/tr><tr><td><strong>Tracking IDs<\/strong><\/td><td>EX1550543 and MO1550821 in the Microsoft 365 admin center<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[Confirmed]<\/strong> Microsoft\u2019s service health record, mirrored by the University of Wisconsin\u2013Milwaukee, shows an Exchange Online incident starting at 10:17 a.m. Central (16:17 UTC): users \u201cmay be unable to connect to their mailboxes in Exchange Online through multiple connection methods.\u201d By 11:45 a.m. Central Microsoft had found connectivity errors on the part of Exchange Online that receives and processes users\u2019 access requests, and by 12:29 p.m. it had moved some US traffic away from the affected infrastructure. (<a href=\"https:\/\/uwm.edu\/outages\/list\/m365-exchange-online-mailbox-connection-issues\/\" target=\"_blank\" rel=\"noopener\">UWM, quoting Microsoft<\/a>)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[Reported]<\/strong> Public reports surged around 12:40 p.m. Eastern. Downdetector logged a peak of roughly 130,000 Outlook problem reports, with Chicago, Seattle and New York among the hot spots. (<a href=\"https:\/\/www.nbcchicago.com\/news\/local\/is-microsoft-outlook-down-company-investigates-error-reports-from-users\/4015769\/\" target=\"_blank\" rel=\"noopener\">NBC Chicago<\/a>) (<a href=\"https:\/\/www.cnbc.com\/2026\/11\/12\/microsoft-outage-outlook-aws-google.html\" target=\"_blank\" rel=\"noopener\">CNBC<\/a>) At 1:26 p.m. Eastern Microsoft opened a wider incident, MO1550821, warning that customers might be unable to connect to Exchange Online, Teams, SharePoint Online, Microsoft 365 Copilot and Defender XDR. (<a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide\/\" target=\"_blank\" rel=\"noopener\">BleepingComputer<\/a>) A separate Teams problem earlier in the day had already been fixed at 17:09 UTC. (<a href=\"https:\/\/www.technobezz.com\/news\/microsoft-365-outage-teams-exchange-online\" target=\"_blank\" rel=\"noopener\">Technobezz<\/a>)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"620\" src=\"https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline.jpg\" alt=\"Timeline of the 12 November 2026 Microsoft 365 outage in UTC: incident opens 16:17, Teams incident fixed 17:09, Downdetector surge 17:40 to 18:20, MO1550821 at 18:26, health-check cause at about 20:00, first servers back at 21:00, still degraded at 22:11.\" class=\"wp-image-4213\" srcset=\"https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline.jpg 1600w, https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline-300x116.jpg 300w, https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline-1024x397.jpg 1024w, https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline-768x298.jpg 768w, https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline-1536x595.jpg 1536w, https:\/\/cyber.mag212.com\/wp-content\/uploads\/2026\/11\/microsoft-365-outage-12-november-2026-timeline-18x7.jpg 18w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><figcaption class=\"wp-element-caption\">Key moments in the outage, in UTC (subtract eight hours for Pacific time). Diagram: MAG212 CYBER<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">What caused it<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[Confirmed by Microsoft, via press]<\/strong> Microsoft first blamed \u201celevated load\u201d on part of its infrastructure, then corrected itself: the load was not driven by more traffic, but by a number of servers being unexpectedly unavailable and straining the rest. (<a href=\"https:\/\/abcnews.com\/US\/outlook-down-microsoft-outage-reported-mail\/story?id=138088203\" target=\"_blank\" rel=\"noopener\">ABC News<\/a>) Shortly before 3 p.m. Eastern it said the affected servers were failing automated health checks, that it was testing a workaround that bypasses the component processing those checks, and that it was looking into elevated processor usage on the affected machines. (<a href=\"https:\/\/www.securityweek.com\/microsoft-365-outage-disrupts-outlook-exchange-online-and-teams\/\" target=\"_blank\" rel=\"noopener\">SecurityWeek<\/a>)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[Reported]<\/strong> Microsoft then said it had stopped more servers from being affected, began returning a subset to service around 4 p.m. Eastern, and successfully tested an alternative way of checking server health on part of the fleet. It is preparing an automated process to find and restart servers that stop responding. (<a href=\"https:\/\/www.forbes.com\/sites\/antoniopequenoiv\/2026\/11\/12\/microsoft-365-down-tech-giant-says-server-failures-causing-disruption\/\" target=\"_blank\" rel=\"noopener\">Forbes<\/a>) (<a href=\"https:\/\/mitchellnow.com\/news\/236632-microsoft-365-outage-november-12-2026\/\" target=\"_blank\" rel=\"noopener\">Mitchell Now<\/a>) At 22:11 UTC the service health page still listed a service degradation, with the next update due at 23:30 UTC. (<a href=\"https:\/\/www.technobezz.com\/news\/microsoft-365-outage-teams-exchange-online\" target=\"_blank\" rel=\"noopener\">Technobezz<\/a>)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Was it a cyberattack?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[Reported]<\/strong> Microsoft has disclosed no evidence of an attack. The outage came two days after November\u2019s Patch Tuesday, which included an exploited Outlook flaw (CVE-2026-124194), but Microsoft\u2019s advisories have not linked that vulnerability to the outage. (<a href=\"https:\/\/www.securityweek.com\/microsoft-365-outage-disrupts-outlook-exchange-online-and-teams\/\" target=\"_blank\" rel=\"noopener\">SecurityWeek<\/a>) <strong>[MAG212 analysis]<\/strong> Everything Microsoft has described so far, servers failing health checks, high processor use and a staged restart, fits an internal reliability failure. We\u2019ll update this article if that changes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who is affected<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Business and school Microsoft 365 users<\/strong> on Exchange Online. Reported affected connection methods include Outlook on the web, the Outlook desktop app (MAPI), mobile mail apps using Exchange ActiveSync, and apps using the REST API. (<a href=\"https:\/\/windowsforum.com\/news\/exchange-online-outage-elevated-infrastructure-load-puts-microsoft-365-connectivity-at-risk-worldwide.452040\/\" target=\"_blank\" rel=\"noopener\">WindowsForum<\/a>)<\/li>\n\n\n<li><strong>Teams, SharePoint\/OneDrive, Copilot and Defender XDR users<\/strong> in the same tenants, intermittently.<\/li>\n\n\n<li><strong>Admins:<\/strong> Microsoft warned the Microsoft 365 admin center itself might not load, so service health may be hard to check from inside. (<a href=\"https:\/\/mitchellnow.com\/news\/236632-microsoft-365-outage-november-12-2026\/\" target=\"_blank\" rel=\"noopener\">Mitchell Now<\/a>)<\/li>\n\n\n<li><strong>Not affected:<\/strong> on-premises Exchange Server, which this incident doesn\u2019t cover. (<a href=\"https:\/\/windowsforum.com\/news\/exchange-online-outage-elevated-infrastructure-load-puts-microsoft-365-connectivity-at-risk-worldwide.452040\/\" target=\"_blank\" rel=\"noopener\">WindowsForum<\/a>)<\/li>\n\n\n<li><strong>[Reported]<\/strong> Users also reported problems with Gmail, Zoom and Yahoo Mail on Downdetector during the outage, and Amazon Web Services said it was operating normally. (<a href=\"https:\/\/www.cnbc.com\/2026\/11\/12\/microsoft-outage-outlook-aws-google.html\" target=\"_blank\" rel=\"noopener\">CNBC<\/a>)<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What to do now<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">If you\u2019re a user<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Don\u2019t reset your password or reinstall Outlook.<\/strong> Nothing is wrong on your side, and an unnecessary reset can lock you out once service returns.<\/li>\n\n\n<li><strong>Wait, then retry.<\/strong> Microsoft is bringing servers back in stages. Close and reopen Outlook, or try Outlook on the web.<\/li>\n\n\n<li><strong>Mail isn\u2019t lost.<\/strong> <strong>[MAG212 analysis]<\/strong> Messages sent to you during the outage are normally queued and delivered once your mailbox reconnects; expect a burst of delayed mail.<\/li>\n\n\n<li><strong>For urgent messages,<\/strong> use a phone call or another agreed channel, not a personal email account for work data.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">If you run IT or an MSP<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Track the official incidents<\/strong> EX1550543 and MO1550821 in the admin center, or Microsoft\u2019s public status page (<a href=\"https:\/\/status.cloud.microsoft\/\" target=\"_blank\" rel=\"noopener\">Microsoft 365 status<\/a>) and the @MSFT365Status account on X if the admin center won\u2019t load.<\/li>\n\n\n<li><strong>Send one clear notice<\/strong> to staff or clients: it\u2019s a Microsoft outage, don\u2019t reset passwords, and IT will confirm when it\u2019s over.<\/li>\n\n\n<li><strong>Hold changes.<\/strong> <strong>[MAG212 analysis]<\/strong> Don\u2019t change MFA, Conditional Access or mail-flow rules to \u201cfix\u201d connectivity; you\u2019ll be untangling them tomorrow.<\/li>\n\n\n<li><strong>Expect a support spike<\/strong> as delayed mail floods in and cached Outlook profiles resync; check the help desk queue for real issues hiding behind outage tickets.<\/li>\n\n\n<li><strong>Watch for outage-themed phishing.<\/strong> <strong>[MAG212 analysis]<\/strong> Big outages are followed by fake \u201cre-verify your Microsoft account\u201d and \u201crestore your mailbox\u201d emails. Remind users that Microsoft won\u2019t email them a link to fix this.<\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Why it matters<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For most organisations, Exchange Online is where mail, calendars, Teams chats and documents all meet, and today shows how much stops when one part of it fails. Microsoft\u2019s own security console, Defender XDR, was on the list of affected services, which matters to security teams who rely on it to watch for attacks. It also landed on a busy security week: MSPs are still cleaning up the ScreenConnect campaign (<a href=\"https:\/\/cyber.mag212.com\/screenconnect-sckit-msp-attack-rmm-plus-extension-rogue-clients-288-endpoints\/\">our coverage<\/a>), so a mail outage that slows alerts and client communication is more than an inconvenience.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The bottom line<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is a Microsoft-side reliability failure, not something you can fix locally. Users should wait it out without resetting anything. IT teams should follow EX1550543 and MO1550821, tell people what\u2019s happening, freeze unnecessary changes and get ahead of the phishing that always follows a headline outage. Every organisation should keep an agreed backup channel for urgent communication when Microsoft 365 is down.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>How we label evidence: <strong>[Confirmed]<\/strong> comes from a primary source such as Microsoft\u2019s service health record; <strong>[Reported]<\/strong> from a news outlet; <strong>[MAG212 analysis]<\/strong> is our judgement. This article reflects Microsoft\u2019s updates up to 22:11 UTC (2:11 p.m. PT) on 12 November 2026 and will be updated if the cause or status changes.<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">Today\u2019s full briefing, with the ScreenConnect MSP attacks, four KEV deadlines and more, is in <a href=\"https:\/\/cyber.mag212.com\/mag212-cyber-daily-2026-11-12-screenconnect-kev-zoom-qlik-antifox\/\">MAG212 CYBER Daily, 12 November 2026<\/a>. Get it free every morning: <a href=\"https:\/\/cyber.mag212.com\/subscribe-free\/\">subscribe to MAG212 CYBER<\/a>. By El Mostafa Ouchen.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>A large Microsoft 365 outage on 12 November 2026 cut users off from Outlook and Exchange Online and spread to Teams, SharePoint, Copilot and Defender XDR. Microsoft blames servers failing health checks and has disclosed no attack. Timeline, what Microsoft said, and what users and IT teams should do.<\/p>","protected":false},"author":1,"featured_media":4212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[340,31,67,158,341,302],"class_list":["post-4214","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-incidents","tag-exchange-online","tag-incident-response","tag-microsoft-365","tag-microsoft-teams","tag-outage","tag-outlook"],"_links":{"self":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts\/4214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/comments?post=4214"}],"version-history":[{"count":0,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/posts\/4214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media\/4212"}],"wp:attachment":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media?parent=4214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/categories?post=4214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/tags?post=4214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}