“Recovery actions are ongoing and have progressed in phases across affected Microsoft 365 infrastructure. Global telemetry and customer reports show incremental improvement in several workloads; however, service health remains variable and capacity has not yet fully returned to baseline. Network and traffic-management actions remain active.
To protect email during recovery, we’re continuing to prioritise queue and backlog processing, and the email timeout window has been extended to 48 hours to preserve delayed messages. At this time, we have no evidence of malicious activity associated with this incident. We will continue to treat this with urgency until full mitigation, and we will share a full Post-Incident Report with root cause and defence-in-depth actions after mitigation is complete.”
