Office 365 Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Office 365 Issues Reports

Latest outage, problems and issue reports in social media:

• 
  ANIL SINGH SONU (@anilsrm10) reported 9 minutes ago

  Dear @Flipkart, it's been over 4 months and my issue is still unresolved. You sold me "Microsoft Office 365 Professional Plus – Lifetime Validity", but the seller activated it using an organization account that is now unusable. Instead of resolving the issue, your team keeps asking for an impossible letter from Microsoft. I need a replacement or refund. Order ID: OD328524328820318100 #Flipkart #ConsumerRights

• 
  Axel Winter (@AxelWinterBkk) reported 12 minutes ago from Khan Na Yao, Bangkok

  @rahulj51 Well i m not copying stuff and I do emails also via openclaw and with Gmail works well. But I have 4 Gmail accounts, 1 icloud and 1 office365 account. outlook mac, ios, and android are pretty decent apps. Apple mail my other choice has sometimes issues with office365 mails

• 
  The 5th Estate (@The_5thEstate) reported 12 minutes ago

  @clnuponaisle5 Most cloud services let you upload encrypted data to. I use OneDrive because the Office 365 subscription gives 1tb of storage space and integrates with the Windows OS really well. I encrypt my files before uploading and it has no problems.

• 
  exchange2k10 (@exchange2k10) reported 13 minutes ago

  Either this guy is deliberately being a hypocrite or he's woefully uninformed. Hard to believe people like this exist with zero knowledge about how the real world works. For my Canadian people EVerything in Canada runs on American tech Your iPhone/iPad/Mac -> American Your Android/PC -> American Majority of the things you interact with -> American Google, X, Claude, Codex/OpenAI, Instagram, Facebook, SnapChat, Office 365 (word, excel etc) Majority of Government infrastructure runs on Azure, AWS, GCP and leverages IBM, Deloitte and other big 4 for consulting. Fix that **** first - i.e. find alternatives (good luck btw) then the virtue signaling would make sense. Until then you people complaining sound like a bunch of ill informed cucks.

• 
  Microsoft Threat Intelligence (@MsftSecIntel) reported 13 minutes ago

  Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart contract previously reported in connection with ClearFake to fetch next-stage instructions. Content stored in a smart contract is resistant to conventional takedown or sinkholing because only the owner of the cryptocurrency wallet that deployed it can make changes. Users are presented with a fake CAPTCHA that instructs them to open the Windows Run dialog, paste clipboard content, and press Enter to execute an attacker-supplied command under the guise of verification. We’re seeing multiple forms of command obfuscation and living-off-the-land abuse, including conhost, cmd, PowerShell, pcalua, mshta, rundll32, msiexec, curl, WMI, WebDAV, and scheduled tasks. Carets split keywords, environment variables hide interpreters, and Windows run headlessly or minimized. TerminalFix lures apply the same technique but direct users to Windows Terminal or PowerShell instead of the Run dialog. This campaign demonstrates that ClickFix and TerminalFix are a high-volume initial access technique. Microsoft reports campaigns targeting thousands of enterprise and consumer devices globally every day, while some malvertising chains can funnel visitors to scam pages. Numerous actors use the technique to deliver Lumma Stealer and other infostealers, RATs such as Xworm and AsyncRAT, loaders including MintsLoader, and remote management tools. A single successful execution can expose credentials, establish persistence, enable lateral movement, and create a path to human-operated ransomware and potential domain compromise. Microsoft recommends that organizations enable Microsoft Defender network, web, and cloud-delivered protection; restrict Run and command-line tools where not required; enable PowerShell script-block logging; and implement application control. Users should never paste commands from CAPTCHAs, browser errors, emails, ads, or unsolicited support pages into Run, Terminal, PowerShell, or Command prompt. Microsoft Defender XDR provides layered protection across the ClickFix attack chain. Defender SmartScreen and Defender for Office 365 help block malicious sites, links, attachments, and fake CAPTCHA lures, while Defender for Endpoint detects suspicious command execution and outbound connections through alerts like “Suspicious command in RunMRU registry”, “Possible ClickFix activity”, “Possible initial access from an emerging threat”. Microsoft Defender Antivirus blocks malicious command execution using detections such as Trojan:Win32/ClickFix.* and Trojan:Win32/TermFix.*. Treat these alerts as evidence of a potential initial access incident: isolate affected devices, investigate credential exposure and persistence, and hunt for related activity.

• 
  Terry Greene (@TerryGGreene) reported 14 minutes ago

  @moshymiss @JesterJum I run it on Zorin OS, but I also have a Windows 10 box running Libre Office. Runs flawlessly on both. Try it, you won't be disappointed. You can always uninstall it if you don't like it. Although, honestly, I can't fathom why anyone wouldn't like it. All of my work documents are generated by corporate Office 365. I've never had a problem working with any of those documents in Libre Office.

• 
  Weems (@weems) reported 15 minutes ago

  @kmcnam1 "ERROR: Office 365 cannot confirm your identity please contact administrator for more information. "

• 
  Bɛrima Yaw Poku 🧠👁️👂🏾 (@barimayawpoku) reported 15 minutes ago

  @elliot_solution Ah, na government communications and emails koraa are running on office365 na documents. They don’t even have on-premise exchange communication server managed in house for data control and security seff. Tweaaa

• 
  Matt Talley (@tallemd) reported 18 minutes ago

  Office 365 has been priced at $6 per inbox for over a decade and during that time it has never turned a profit. I'm almost sure that means it's impossible. Normally you would shut down an unprofitable line of business but the military insists it is necessary for war effort.

• 
  Mokona512 (@mokona512) reported 19 minutes ago

  @pascal_bornet With that in mind, he will still face the quarterly full screen ads where microsoft after a major updates, tries to push people to onedrive, office 365, and copilot, any any other bloatware they have going at the time (not much of a way to fix that without causing update issues).

• 
  Value Investor 💸 (@value_invest01) reported 21 minutes ago

  @CalebInvests_ Ackman bought $MSFT in Feb when it dipped and looked more compelling on valuation. He probably sees Microsoft as more "embedded" in enterprise, Office 365, Azure, Copilot with stickier revenue and better pricing power compared to $META, which is heavily tied to ad cycles and consumer attention. Wall Street isn’t missing anything big, it’s mostly about price and margin of safety. MSFT just offered a better entry at the time. I believe his entry was around $370 for $MSFT that was a great entry and it provided a great margin of safety. $META would need to go down into $450 area for same margin of safety $MSFT was at $370.

• 
  DFIR Lab (@DFIR_Lab) reported 21 minutes ago

  🎣 DFIR Suite API Spotlight: CheckPhish URL Scan You're triaging a suspected phishing email. The URL looks clean in VirusTotal. No hits in your threat intel feeds. But something feels off. This is where POST /phishing/checkphish earns its keep. It scans URLs in real-time using CheckPhish's detection engine — purpose-built to catch live phishing pages, tech support scams, and brand impersonation attempts that haven't made it into static blacklists yet. What you get back: disposition (clean/suspicious/phishing), the brand being targeted (Microsoft, PayPal, etc.), and a screenshot of the rendered page. That screenshot alone can confirm what logs can't — whether it's a convincing Office 365 login clone or a legitimate site. Practical scenario: User forwards you a "verify your account" email with a shortened link. You expand it, run it through /phishing/checkphish, and within seconds you have a verdict and visual proof. No need to spin up a sandboxed browser or wait for threat intel to catch up. Costs 2 credits per request. Available on all plans at hXXps://platform[.]dfir-lab[.]ch It's a fast, reliable check for the URLs that don't trigger your existing defenses — but probably should. #DFIR #ThreatIntel

• 
  Lithicarb 𓅋 (@Lithicarb) reported 23 minutes ago

  @bestfilly @SabreWuff Corps, public sector and universities generally all purchase blanket site licenses which pushes the per seat cost of the Windows OS and Office 365 down to between 5 to 10 bucks. Also the workstations these places lease suck ***. I know, I spent years in Monash IT

• 
  zedaking (@zeda_king) reported 25 minutes ago

  @KingDamilotun XLOOKUP (This only works on latest version of excel like Office 365 and has inbuilt error msg) INDEX-MATCH (works on older version of Excel, but more complex to write. The downside here is that you'd have to wrap it in an IFERROR function to return an error msg)

• 
  Mr Brute (@BuddyNoLove) reported 25 minutes ago

  Is there an office365 outage? I can’t authenticate to Teams or Outlook 🫠