Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to intelligence
operational-disruptionwidely-deployed-product-advisorycloud-service-vulnerability

Microsoft Exchange Online Outage Disrupts Mailbox Access

Updated 3mo agoFirst seen Mar 16, 20262 sources

Microsoft investigated and worked to mitigate an Exchange Online service disruption that prevented some customers from accessing mailboxes and calendars through multiple connection methods. The incident, tracked in the Microsoft 365 admin center as EX1253275, affected services including Outlook on the web, Outlook desktop, Exchange ActiveSync, and other Exchange Online protocols, with users also potentially impacted through clients relying on MAPI, IMAP, or EWS. Microsoft said engineering teams were analyzing the root cause and making service-side changes after identifying infrastructure that was not processing traffic efficiently.

The outage affected a subset of Exchange Online users globally, disrupting email, scheduling, and shared mailbox workflows for enterprise customers. Microsoft reported telemetry indicating recovery for some affected users while continuing to monitor service health for sustained restoration, although customer reports suggested access problems persisted during the response window. One report also noted a separate Microsoft 365 Copilot sign-in issue, but the core incident remained the Exchange Online mailbox-access outage and the resulting interruption to core Microsoft 365 communications services.

Share:
Microsoft Exchange Online Outage Disrupts Mailbox Access
Stay ahead

Get ahead of threats like this

Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.

EVENT TIMELINE

How this story unfolded

3 events from the most recent confirmed update back to the earliest known activity.

3 EVENTS
Mar 16, 20263mo ago

Microsoft issues further public updates while continuing outage investigation

Microsoft published additional service health updates on March 16, 2026, including notices at 4:26 PM, 4:53 PM, and 7:49 PM IST, saying engineering teams were still working to identify the root cause and restore service. The company advised administrators to monitor the Microsoft 365 admin center and use unaffected access methods as temporary workarounds.

Microsoft reports telemetry shows recovery, but customers still see issues

Later the same day, Microsoft said telemetry indicated the Exchange Online issue was no longer occurring for affected users and that it was monitoring for sustained recovery. However, customers continued reporting mailbox access problems, and Office.com also displayed an error message.

Microsoft acknowledges Exchange Online mailbox access outage

Microsoft said it was investigating an Exchange Online service disruption preventing some customers from accessing mailboxes and calendars through multiple connection methods, including Outlook on the web, Outlook desktop, Exchange ActiveSync, and other Exchange Online protocols. The incident was tracked in the Microsoft 365 admin center as EX1253275 and was acknowledged at 06:42 UTC.

The operational view lives in Mallory

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t — which of your assets are affected, which threat actors are using it right now, which detections to deploy, and what to do next.
Exposure mapping

Map indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidence

Every observed campaign, victim, and pivot linked to actors named in this story.

Associated malware

Malware, exploits, and IOCs connected to the activity described here.

Detection signatures

YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alerts

Get matching new stories delivered to your team as they break — not the next morning.

AI threads

Ask questions about this story and take action on the answers.

Microsoft Exchange Online Outage Disrupts Mailbox Access | Mallory