Office 365 status: access issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Office 365 reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Office 365 users through our website.

• Sign in (63%)
• Errors (19%)
• Website Down (18%)

Live Outage Map

The most recent Office 365 outage reports came from the following cities:

City	Problem Type	Report Time
Bogotá	Sign in	7 days ago
Paris	Sign in	14 days ago
Milly-la-Forêt	Errors	14 days ago
Unión de Crédito Agrícola de Hermosillo	Sign in	23 days ago
Mumbai	Errors	26 days ago
Bogotá	Sign in	26 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Office 365 Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Mr Brute (@BuddyNoLove) reported 14 minutes ago

  Is there an office365 outage? I can’t authenticate to Teams or Outlook 🫠

• 
  Nick (@maietta) reported 14 minutes ago

  Holy **** GoDaddy is among the worst companies on the planet. Been trying desperately to get them to fix the issue with a domain name previously owned by another company who in the past, used Office 365. Now that my client owns the domain, we can't seem to get them to remove the domain. Microsoft support has been non-existent as well. They assigned a dude to the case, but then he dropped the ball and won't reply to me.

• 
  Maik Voets (@MaikVoets) reported 17 minutes ago

  @ariaradnia Only if you move from a Google workspace company to one that’s all choked up in office 365 you realize how bad their products are. Take collaboration in their office products. They still often have synchronization issues - these are the basics! Why can’t they figure it out?

• 
  ANIL SINGH SONU (@anilsrm10) reported 18 minutes ago

  Dear @Flipkart, it's been over 4 months and my issue is still unresolved. You sold me "Microsoft Office 365 Professional Plus – Lifetime Validity", but the seller activated it using an organization account that is now unusable. Instead of resolving the issue, your team keeps asking for an impossible letter from Microsoft. I need a replacement or refund. Order ID: OD328524328820318100 #Flipkart #ConsumerRights

• 
  Professor Simon (@ProfSimonOnline) reported 18 minutes ago

  Did you know that personal devices can become gateways for corporate data breaches? A recent case revealed a malware attack that accessed Office 365 through a compromised BYOD. The fix? Continuous monitoring and behavior analysis! How secure is your work device? #CyberSecurity

• 
  Ed Andersen (@edandersen) reported 20 minutes ago

  @matvelloso Yes their attach rate to office 365 is not great but the entire company is behind it. It’s not being wound down

• 
  The Catalyst Edge (@zeatle2) reported 20 minutes ago

  Two very different setups. $CLOV (Clover Health) — not in today's scrub, but running off a REAL catalyst. 🟢 Medicare 4.5-star upgrade via federal COURT ORDER (court forced CMS to re-rate) 🟢 Covers 97%+ of members on Contract H5141 🟢 Higher star rating = higher CMS reimbursement rates in 2027 🟢 Q1 2026: GAAP profitable, revenue +62% YoY 🔴 Already up 18.9% yesterday — needs consolidation first This is a fundamental re-rating, not a pump. Medicare stars = real dollars. Entry: $4.70–$5.00 on pullback | T1: $6.20 | T2: $7.50 | Stop: $4.20 $MSFT (Microsoft) activity score 522 — #3 on the full scrub. 🟢 Enterprise AI Copilot embedded in Office 365, Teams, Azure — the deployment layer 🟢 Down 14% YTD = multiple compression on a franchise business 🟢 #3 scrub = institutional money starting to re-rate 🔴 ORCL's $40B raise rattles AI infra capex narrative — watch for spillover At $398, this is best-in-class enterprise AI at a real discount. Entry: $395–$405 | T1: $435 | T2: $460 | Stop: $380

• 
  Kyle Davis (@orcawhale) reported 21 minutes ago

  @ToddHagopian @Dream4Liberty @ChaseForLiberty They did not ask to spend $40k to tell them the system they built was broken instead of the $10k to fix it, lol. They did not ask Angela to hire Buchkovich so that there was no oversight, kill Burns' contract, then spend more than $100k killing the CiviCRM that money had just been spent on for Zoho, which is worse in every conceivable way. The destruction of everything that Moellman and Burns built happened at the end of 2023. Those IT costs listed are from the work to tear down Civi and Zoho, not the total IT costs. ONLY the intentionally doubled (because Angela, who never used Civi, decided it had to die) costs or TRIPLED costs (like with LPMail, Gmail, and Office365). I've been here 25 years, Todd. I watched what happened with the IS committee. You can be defensive about this, but you weren't the one being pointed at as a problem by Amanda or by me. You're taking facts personally, which isn't like you. Believe what you want.

• 
  Microsoft Threat Intelligence (@MsftSecIntel) reported 29 minutes ago

  Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart contract previously reported in connection with ClearFake to fetch next-stage instructions. Content stored in a smart contract is resistant to conventional takedown or sinkholing because only the owner of the cryptocurrency wallet that deployed it can make changes. Users are presented with a fake CAPTCHA that instructs them to open the Windows Run dialog, paste clipboard content, and press Enter to execute an attacker-supplied command under the guise of verification. We’re seeing multiple forms of command obfuscation and living-off-the-land abuse, including conhost, cmd, PowerShell, pcalua, mshta, rundll32, msiexec, curl, WMI, WebDAV, and scheduled tasks. Carets split keywords, environment variables hide interpreters, and Windows run headlessly or minimized. TerminalFix lures apply the same technique but direct users to Windows Terminal or PowerShell instead of the Run dialog. This campaign demonstrates that ClickFix and TerminalFix are a high-volume initial access technique. Microsoft reports campaigns targeting thousands of enterprise and consumer devices globally every day, while some malvertising chains can funnel visitors to scam pages. Numerous actors use the technique to deliver Lumma Stealer and other infostealers, RATs such as Xworm and AsyncRAT, loaders including MintsLoader, and remote management tools. A single successful execution can expose credentials, establish persistence, enable lateral movement, and create a path to human-operated ransomware and potential domain compromise. Microsoft recommends that organizations enable Microsoft Defender network, web, and cloud-delivered protection; restrict Run and command-line tools where not required; enable PowerShell script-block logging; and implement application control. Users should never paste commands from CAPTCHAs, browser errors, emails, ads, or unsolicited support pages into Run, Terminal, PowerShell, or Command prompt. Microsoft Defender XDR provides layered protection across the ClickFix attack chain. Defender SmartScreen and Defender for Office 365 help block malicious sites, links, attachments, and fake CAPTCHA lures, while Defender for Endpoint detects suspicious command execution and outbound connections through alerts like “Suspicious command in RunMRU registry”, “Possible ClickFix activity”, “Possible initial access from an emerging threat”. Microsoft Defender Antivirus blocks malicious command execution using detections such as Trojan:Win32/ClickFix.* and Trojan:Win32/TermFix.*. Treat these alerts as evidence of a potential initial access incident: isolate affected devices, investigate credential exposure and persistence, and hunt for related activity.

• 
  Black Edge (@BlackEdgeFund) reported 31 minutes ago

  Microsoft is starting to show up on deep value screens. This is not a broken company. This is not a melting ice cube. This is the most dominant software business ever built — Office, Azure, Teams, LinkedIn, GitHub, Copilot — and it is sitting significantly off its all time highs. The market spent three years pricing Microsoft as an AI winner at any price. Multiple expansion took valuation to levels that required flawless execution forever. When the AI trade started rolling over, Microsoft got caught in the wreckage — not because the business broke, but because the price was simply too high. Now the price is coming to the business. Azure growth is still compounding. Office 365 pricing power is intact. Free cash flow is a machine. The balance sheet is a fortress. Copilot monetization has barely started. This is what deep value in megacap tech looks like. It does not look like a disaster. It looks like a great business having a bad year in the market. The distinction matters enormously. Great business. Washed out price. The market is handing you an entry into the best software company on earth at a discount it has not offered in years.

• 
  DataJuggler (@DataJuggler007) reported 31 minutes ago

  @FurkanGozukara I stopped giving money to companies I can't call. In July 2024, Microsoft expected me to go a month without email. I don't own a cell phone, email is my communication with the world. I cancelled Office 365, moved my mx records for my domain and went down to $1.50 a month.

• 
  Security Weekly Podcast Network (@SecWeekly) reported 33 minutes ago

  Passwords get stolen. MFA prompts get approved. Rob Allen explains why some organizations are now locking SaaS apps like Office 365, GitHub, and Salesforce to specific trusted IP paths instead of exposing login access to the entire internet. Even if an attacker has credentials, they still can’t connect unless traffic comes from the approved location. Is location-based access control becoming the next layer after MFA? #Cybersecurity #SaaS #IdentitySecurity

• 
  Coco Freak (@Coco_the_freak) reported 35 minutes ago

  So aparrently, the „Smart“ App Control from #Microsoft in the #Windows „Security“-Settings blocks you from installing #office365 … and you have to PERMANENTLY shut off that „Security Feature“ to fix this issue … fml why did i go into IT-Support 🙈😭

• 
  Nick (@maietta) reported 38 minutes ago

  @paul_e_jones No, I have zero business with GoDaddy. But I have to deal with them for an issue that they caused through Microsoft office 365's design. The problem is that a domain name that belongs to my client used to belong to a company that used to have a Microsoft office 365 account provided through the vendor. GoDaddy. GoDaddy sells office 365 accounts. What happens is a domain name previously used with Microsoft office 365 but then the account expires and is never renewed because the company that held the domain name went out of business and sold in bankruptcy. Two company transitions later and we acquire the domain. So we go to set up Microsoft office 365 only to be hit with a message that we cannot provision the domain on their platform because of a previous tenant that just doesn't exist anymore in the real world. That business vanished a long time ago.

• 
  zedaking (@zeda_king) reported 38 minutes ago

  @KingDamilotun XLOOKUP (This only works on latest version of excel like Office 365 and has inbuilt error msg) INDEX-MATCH (works on older version of Excel, but more complex to write. The downside here is that you'd have to wrap it in an IFERROR function to return an error msg)

• 
  Terry Greene (@TerryGGreene) reported 41 minutes ago

  @moshymiss @JesterJum I run it on Zorin OS, but I also have a Windows 10 box running Libre Office. Runs flawlessly on both. Try it, you won't be disappointed. You can always uninstall it if you don't like it. Although, honestly, I can't fathom why anyone wouldn't like it. All of my work documents are generated by corporate Office 365. I've never had a problem working with any of those documents in Libre Office.

• 
  PS5 “ RUNS ON XBOX GAMES” (@DomingoRoldan1) reported 43 minutes ago

  @AmericanTimdog @Grummz Just do steam,the problems it’s contents creator, staying quite and going to June show. We need to stop supporting content creators . Bring the whole house down. Am not subscribing to no office 365 , going full with google Gemini..I have GP till 2027 am done.

• 
  Glich (@Glich) reported 44 minutes ago

  @yonann partly true. I work corp IT. A good part of my users whould be fine with a snapdragon chromebook. But they get tier Ryzen 9 or I7 . All their work in in office365 and chrome. and this year our standard low spec model we issue increased in price 50%.

• 
  Bɛrima Yaw Poku 🧠👁️👂🏾 (@barimayawpoku) reported 46 minutes ago

  @elliot_solution Ah, na government communications and emails koraa are running on office365 na documents. They don’t even have on-premise exchange communication server managed in house for data control and security seff. Tweaaa

• 
  NaN goto (@nmnvzr) reported 47 minutes ago

  @marcelhaasIO @MaxBrodeurUrbas @satyanadella All my accounts use the same email and sometimes different passwords. The average user does not know he needs to save the credentials as “azure login”, “office 365 login”, “exchange admin login”. Dude it’s a mess.

• 
  Brian Teague 🐂 ⭕️ PBA 3 Berkeley (@undergroundlair) reported 47 minutes ago

  @Polymarket In all fairness to Microsoft, if the NASA Admin doesn’t set their Office 365 location to #outerfukingspace they might have an issue logging in.

• 
  Mark Messinger (@MarkMessinger) reported 50 minutes ago

  @Microsoft365 Microsoft's Office 365 Graph API is still broken. Sheesh, @Office365, how much longer will it take to fix what you've broken?

• 
  mRr3b00t (@UK_Daniel_Card) reported 53 minutes ago

  @arinwaichulis Out of office replies reveal the address. When you say bounced emails reveal the source email; what do you mean by this? As in the mail server rejects it? Eg office 365 exchange online?

• 
  Jonathan Cantliff (@cantliff9) reported 55 minutes ago

  @madebygoogle @MicrosoftHelps Gmail app not working with Office 365 emails (again) Doesn't seem to want to load modern authentication Could someone look into this please

• 
  Sidstream (@siddusaik) reported 56 minutes ago

  @Sakshi50038 I prefer quality over desi !!! Compare both and tell me which is better. Don't tell me to use indian products bcoz they are indian That's not how purchasing works. How many websites show you login using zoho mail? Chatgpt Copilot is integrated with office 365 sarvam is not.

• 
  💯 Almin Ibrahimović MBA CGA FCMI CMgr CITP MBCS (@_almin) reported 57 minutes ago

  @Microsoft365 To use Scout, you need: 1. to be part of the Frontier Preview Program 2. need Office 365 Copilot Access 3. need local admin privileges on the device 4. your IT Admin needs to configure Frontier. 5. your IT Admin needs to configure InTune policy for Scout 6. your local IT Admin needs to agree to (attest to) and opt-in their organisation to third party inference paths. Note: "When data is sent to GitHub Copilot, M365 data residency, retention, eDiscovery, legal hold, Data Loss Prevention (DLP), Sensitivity and Confidentiality Labels, audit, SLAs, and the Customer Copyright Commitment do not apply." Here is why this matters: If 'AI' extracts a list of sensitive intellectual property or customer data from a labeled document and pastes it into a new response, that new response has no label. A user could easily copy and paste that text into an external email or a public generative AI tool without triggering any data loss prevention alerts. Regulatory frameworks require strict auditing of where sensitive data travels. Because the new content does not inherit the source classification, your automated compliance systems lose track of that data. The responsibility shifts entirely to the end user to manually classify every single output generated by the AI session, which frequently leads to human error.

• 
  Vlado Mamic (@vladomamic) reported 58 minutes ago

  Office 365 Fix

• 
  DFIR Radar (@DFIR_Radar) reported 1 hour ago

  Silk Typhoon (HAFNIUM), a Chinese 🇨🇳 state APT, has evolved from on-prem Exchange exploitation to cloud-native supply chain attacks, most recently abusing CVE-2025-3928 in Commvault's Azure-hosted M365 backup SaaS to pivot into downstream customer tenants. - Initial access spans three vectors: CVE-2025-3928 (zero-day in Commvault Web Server, T1190), stolen API keys from privileged cloud vendors (T1195), and leaked corporate credentials found on public repos like GitHub (T1078.004). The Commvault campaign gave them client secrets for Metallic M365 backups, opening direct paths into customer M365 environments via hijacked service principals. - Lateral movement pivots from on-prem to cloud by targeting Entra Connect servers (T1210, T1078.002), enabling privilege sync between Active Directory and Entra ID. Credential dumping and key vault theft support pass-the-hash moves (T1550.002) into Azure. - Persistence relies on adding passwords to existing consented service principals or creating new Entra ID applications named to mimic legitimate Office 365 services (T1098.001, T1036). Web shells handle C2 on compromised Azure VMs (T1505.003). - Collection targets email via EWS and MSGraph APIs, plus SharePoint (T1213.002) and OneDrive (T1213.003), all through OAuth apps with admin consent, a low-noise, API-native exfiltration path that bypasses many endpoint controls. #DFIR_Radar

• 
  The Catalyst Edge (@zeatle2) reported 1 hour ago

  Two very different setups. $CLOV (Clover Health) — not in today's scrub, but running off a REAL catalyst. 🟢 Medicare 4.5-star upgrade via federal COURT ORDER (court forced CMS to re-rate) 🟢 Covers 97%+ of members on Contract H5141 🟢 Higher star rating = higher CMS reimbursement rates in 2027 🟢 Q1 2026: GAAP profitable, revenue +62% YoY 🔴 Already up 18.9% yesterday — needs consolidation first This is a fundamental re-rating, not a pump. Medicare stars = real dollars. Entry: $4.70–$5.00 on pullback | T1: $6.20 | T2: $7.50 | Stop: $4.20 $MSFT (Microsoft) activity score 522 — #3 on the full scrub. 🟢 Enterprise AI Copilot embedded in Office 365, Teams, Azure — the deployment layer 🟢 Down 14% YTD = multiple compression on a franchise business 🟢 #3 scrub = institutional money starting to re-rate 🔴 ORCL's $40B raise rattles AI infra capex narrative — watch for spillover At $398, this is best-in-class enterprise AI at a real discount. Entry: $395–$405 | T1: $435 | T2: $460 | Stop: $380

• 
  NorthCarolinaTrader (@NCarolinaTrader) reported 1 hour ago

  @Marketintel_x @BrodyFord_ @business It’s crap. co-pilot’s worse performance is when you seek its assistance with other Microsoft software. You have better luck using Google to help with Microsoft Office 365 issues.