Office 365 Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Office 365 Issues Reports

Latest outage, problems and issue reports in social media:

• 
  BackwoodsSafetyMan (@Goard_O) reported 1 minute ago

  @unusual_whales Will AI need Office365? If not, Microsoft will be in trouble

• 
  Adrien Barr (@AdrienBarr73223) reported 3 minutes ago

  Microsoft Azure is not responding to trouble ticket @AzureSupport 2604020010004795. It was opened 4/2/2026 and there hasn't been a technician assigned yet. Users cannot logon to Azure /Entra accounts including Office 365 business premium

• 
  Microsoft Threat Intelligence (@MsftSecIntel) reported 4 minutes ago

  Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart contract previously reported in connection with ClearFake to fetch next-stage instructions. Content stored in a smart contract is resistant to conventional takedown or sinkholing because only the owner of the cryptocurrency wallet that deployed it can make changes. Users are presented with a fake CAPTCHA that instructs them to open the Windows Run dialog, paste clipboard content, and press Enter to execute an attacker-supplied command under the guise of verification. We’re seeing multiple forms of command obfuscation and living-off-the-land abuse, including conhost, cmd, PowerShell, pcalua, mshta, rundll32, msiexec, curl, WMI, WebDAV, and scheduled tasks. Carets split keywords, environment variables hide interpreters, and Windows run headlessly or minimized. TerminalFix lures apply the same technique but direct users to Windows Terminal or PowerShell instead of the Run dialog. This campaign demonstrates that ClickFix and TerminalFix are a high-volume initial access technique. Microsoft reports campaigns targeting thousands of enterprise and consumer devices globally every day, while some malvertising chains can funnel visitors to scam pages. Numerous actors use the technique to deliver Lumma Stealer and other infostealers, RATs such as Xworm and AsyncRAT, loaders including MintsLoader, and remote management tools. A single successful execution can expose credentials, establish persistence, enable lateral movement, and create a path to human-operated ransomware and potential domain compromise. Microsoft recommends that organizations enable Microsoft Defender network, web, and cloud-delivered protection; restrict Run and command-line tools where not required; enable PowerShell script-block logging; and implement application control. Users should never paste commands from CAPTCHAs, browser errors, emails, ads, or unsolicited support pages into Run, Terminal, PowerShell, or Command prompt. Microsoft Defender XDR provides layered protection across the ClickFix attack chain. Defender SmartScreen and Defender for Office 365 help block malicious sites, links, attachments, and fake CAPTCHA lures, while Defender for Endpoint detects suspicious command execution and outbound connections through alerts like “Suspicious command in RunMRU registry”, “Possible ClickFix activity”, “Possible initial access from an emerging threat”. Microsoft Defender Antivirus blocks malicious command execution using detections such as Trojan:Win32/ClickFix.* and Trojan:Win32/TermFix.*. Treat these alerts as evidence of a potential initial access incident: isolate affected devices, investigate credential exposure and persistence, and hunt for related activity.

• 
  mRr3b00t (@UK_Daniel_Card) reported 4 minutes ago

  like for example: if you defend an org you will likely have: A firewall/VPN server A router/switch A cloud hosted web server Microsoft office 365 Maybe an Remote Desktop Services (or VDI) Service Your daily world will not be full of zero days exploding inside ur VPN server (unless you have a fortinet :P /s) these are rare events. You will have: Phishing/AITM attacks Scams/BEC Identity Dictionary/Brute Force you will also have malware etc. on box IPS/IDS/EDR alerts for behavioural type stuff (most of these are false positives) so software vulnerabilities on the edge in terms of volume will likely not be ur daily grind! identity will.

• 
  Mr Brute (@BuddyNoLove) reported 6 minutes ago

  Is there an office365 outage? I can’t authenticate to Teams or Outlook 🫠

• 
  Brian Teague 🐂 ⭕️ PBA 3 Berkeley (@undergroundlair) reported 10 minutes ago

  @aakashgupta In all fairness to Microsoft, if the NASA Admin doesn’t set their Office 365 location to #outerfukingspace they might have an issue logging in.

• 
  Brian Teague 🐂 ⭕️ PBA 3 Berkeley (@undergroundlair) reported 10 minutes ago

  @nypost In all fairness to Microsoft, if the NASA Admin doesn’t set their Office 365 location to #outerfukingspace they might have an issue logging in.

• 
  Pimplefresh (@pimplefresh) reported 16 minutes ago

  @RihardJarc Half of its market value is office 365. So you can cut that segment in half, thus reducing its market cap by 25%. I think that segment's going to go down even more

• 
  DataJuggler (@DataJuggler007) reported 17 minutes ago

  @FurkanGozukara I stopped giving money to companies I can't call. In July 2024, Microsoft expected me to go a month without email. I don't own a cell phone, email is my communication with the world. I cancelled Office 365, moved my mx records for my domain and went down to $1.50 a month.

• 
  Sidstream (@siddusaik) reported 19 minutes ago

  @Sakshi50038 I prefer quality over desi !!! Compare both and tell me which is better. Don't tell me to use indian products bcoz they are indian That's not how purchasing works. How many websites show you login using zoho mail? Chatgpt Copilot is integrated with office 365 sarvam is not.

• 
  Dan (@Holmyverse) reported 21 minutes ago

  @FinanceDirCFO But rather "subprime AI", right? SaaS stocks go down because people don't get business, and think that Dropbox, LinkedIn, Spotify, Office 365, Slack, Netflix, Instagram etc. will go out of business simply because "anyone can vibe code their own version".

• 
  Toby McEvoy ♠❤♦♣ (@mcevoytm) reported 25 minutes ago

  @KeithMalinak Autocorrect may have been taking a few days off. Here's a real-life example from my own workplace. Through the miracle of SharePoint and Office365, I'm sharing a document with a Project Manager and we're adding questions and answers as I am refining his request for a change to our production environment. He edited something in the document abruptly last week resulting in colliding words and other jumbled things that I couldn't parse. I highlighted the text and requested, "Please fix these typos when you get a moment. " He fixed the typos and left me a comment in response: "Compelted"

• 
  Jonathan Cantliff (@cantliff9) reported 26 minutes ago

  @madebygoogle @MicrosoftHelps @gmail Gmail app not working with Office 365 emails (again) Doesn't seem to want to load modern authentication Could someone look into this please Widespread complaints online and on app store reviews. Folks, this needs some attention!

• 
  Savior Of Man 🧠🧬⚡️ (@OttoVonStark) reported 28 minutes ago

  @Mettshish @onestromelufan @NetflixAnime It’s the stupid Indians that work there that caused this whole mess, they have been doing this for a very long time and have been getting away with it for a long long time. Until now this plague has started to reveal itself into the public eye. Office 365 not working in space was just the tip of the iceberg people

• 
  Rob (@Rob_Tb_West) reported 29 minutes ago

  @NXT4EU We used to have office computers, running on an office server park. No outside computers had access. Micro$oft mandates Office 365 and OneDrive. The server may be in Europe, but where is the backup server. And more important: Who has admin rights over your files?