Microsoft 365 Copilot Bug Exposed Confidential Emails to AI Summarization
A coding error in Microsoft 365 Copilot allowed its AI chat feature to process and summarize sensitive emails despite existing Data Loss Prevention (DLP) policies designed to block such access. The issue, tracked as CW1226324, affected the "work tab" in Copilot Chat, which assists users with summarizing content, drafting responses, and analyzing data across Outlook, Word, Excel, PowerPoint, and OneNote.
Key Details:
- Who: Microsoft 365 Copilot users, particularly enterprise customers.
- What: A bug caused Copilot to read and summarize emails in Sent Items and Drafts folders, including those labeled as confidential or sensitive.
- When: The issue emerged on January 21 and persisted until Microsoft began deploying a fix in early February.
- Where: Impacted Outlook desktop users with Copilot enabled.
- Why: The bug bypassed DLP policies, allowing AI processing of restricted content despite security labels.
Impact:
While Microsoft stated that no unauthorized access occurred users could only see content they were already permitted to view the incident raised concerns about AI integration with enterprise security. Potential risks included:
- Legal or financial discussions being summarized outside intended controls.
- HR communications exposed to automated analysis.
- Undermined trust in AI-driven productivity tools.
Microsoft’s Response:
The company confirmed the issue, stating that a configuration update was rolled out globally to exclude protected content from Copilot access. However, Microsoft has not disclosed the number of affected organizations or a final remediation timeline.
Broader Implications:
The incident underscores the challenges of balancing AI utility with security. As AI assistants gain deeper access to sensitive data, even minor coding errors can create unexpected exposure, highlighting the need for rapid policy adaptation and transparency in AI deployments.
Source: https://www.foxnews.com/tech/why-microsoft-365-copilot-bug-matters-data-security
Microsoft Copilot cybersecurity rating report: https://www.rankiteo.com/company/microsoftcopilot
"id": "MIC1772477164",
"linkid": "microsoftcopilot",
"type": "Vulnerability",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Multiple (cross-industry)',
'location': 'Global',
'name': 'Microsoft 365 Copilot users (enterprise '
'customers)',
'type': 'Enterprise Software Users'}],
'attack_vector': 'Software Configuration Error',
'data_breach': {'data_exfiltration': 'No unauthorized access, but AI '
'summarization occurred',
'file_types_exposed': 'Emails (Outlook)',
'sensitivity_of_data': 'High (confidential/sensitive)',
'type_of_data_compromised': 'Emails (confidential, sensitive, '
'legal, financial, HR '
'communications)'},
'date_detected': '2024-01-21',
'date_resolved': '2024-02-early',
'description': 'A coding error in Microsoft 365 Copilot allowed its AI chat '
'feature to process and summarize sensitive emails despite '
'existing Data Loss Prevention (DLP) policies designed to '
"block such access. The issue affected the 'work tab' in "
'Copilot Chat, which assists users with summarizing content, '
'drafting responses, and analyzing data across Outlook, Word, '
'Excel, PowerPoint, and OneNote.',
'impact': {'brand_reputation_impact': 'Undermined trust in AI-driven '
'productivity tools',
'data_compromised': 'Confidential and sensitive emails (Sent Items '
'and Drafts folders)',
'operational_impact': 'Potential exposure of legal, financial, and '
'HR communications to unauthorized AI '
'summarization',
'systems_affected': 'Microsoft 365 Copilot (Outlook desktop '
'integration)'},
'investigation_status': 'Resolved (fix deployed)',
'lessons_learned': 'Challenges of balancing AI utility with security; need '
'for rapid policy adaptation and transparency in AI '
'deployments.',
'post_incident_analysis': {'corrective_actions': 'Configuration update to '
'exclude protected content '
'from AI processing',
'root_causes': "Coding error in Copilot's DLP "
'policy enforcement'},
'references': [{'source': 'Microsoft Security Response'}],
'response': {'communication_strategy': 'Public acknowledgment of the issue '
'and fix deployment',
'containment_measures': 'Configuration update to exclude '
'protected content from Copilot access',
'remediation_measures': 'Global rollout of a fix to enforce DLP '
'policies'},
'title': 'Microsoft 365 Copilot Bug Exposed Confidential Emails to AI '
'Summarization',
'type': 'AI Integration Bug',
'vulnerability_exploited': 'CW1226324 (Copilot DLP bypass)'}