Microsoft blames massive Microsoft 365 outage on maintenance bug
A bug in Microsoft's automated network maintenance request system caused a major outage affecting Microsoft 365 and Azure services in the West US region. The bug mistakenly removed IP routes from more devices than intended, disrupting network traffic entering or leaving the region. Services impacted included SharePoint Online, Microsoft Teams, OneDrive, Microsoft 365 Admin Center, Power Automate, Copilot Chat, Microsoft Loop, and multiple Azure services. Microsoft identified the issue, rolled back the maintenance change, and restored service within several hours. A full internal review is underway to improve safety checks and automation processes.
AI Analysis
Technical Summary
Microsoft experienced a significant outage on July 23, 2026, due to a bug in its automated network maintenance request system. During routine maintenance isolating specific network paths in the West US Azure region, the system incorrectly marked additional network devices for maintenance, causing IP routes to be removed from more devices than intended. This removal disrupted network traffic between Microsoft's West US datacenter and its wide-area network, affecting multiple Microsoft 365 and Azure services. Microsoft engineers traced the problem to the maintenance change, initiated a rollback, and restored affected infrastructure by 2:26 PM ET, with full recovery by 3:41 PM ET. The incident is under a detailed internal review focusing on safety checks and automated maintenance processes.
Potential Impact
The outage caused connectivity failures, increased latency, and service disruptions for numerous Microsoft 365 services including SharePoint Online, Microsoft Teams, OneDrive, and the Microsoft 365 Admin Center, as well as Azure services such as Azure App Service, Azure Kubernetes Service, Azure Cosmos DB, and others. Users experienced errors, degraded functionality, intermittent access, and delays in security-related services like Microsoft Defender. The disruption primarily affected customers accessing services through network infrastructure connected to the West US Azure region. The outage lasted several hours until the maintenance change was rolled back and services were restored.
Mitigation Recommendations
Microsoft has resolved the outage by rolling back the faulty maintenance change and restoring network routes. The company is conducting a full internal review of the automated maintenance request system and safety checks to prevent recurrence. No immediate action is required from customers, but Microsoft initially advised reviewing business continuity and disaster recovery plans as a precaution. Customers should monitor official Microsoft communications for the forthcoming Post Incident Review and any additional guidance.
Microsoft blames massive Microsoft 365 outage on maintenance bug
Description
A bug in Microsoft's automated network maintenance request system caused a major outage affecting Microsoft 365 and Azure services in the West US region. The bug mistakenly removed IP routes from more devices than intended, disrupting network traffic entering or leaving the region. Services impacted included SharePoint Online, Microsoft Teams, OneDrive, Microsoft 365 Admin Center, Power Automate, Copilot Chat, Microsoft Loop, and multiple Azure services. Microsoft identified the issue, rolled back the maintenance change, and restored service within several hours. A full internal review is underway to improve safety checks and automation processes.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Microsoft experienced a significant outage on July 23, 2026, due to a bug in its automated network maintenance request system. During routine maintenance isolating specific network paths in the West US Azure region, the system incorrectly marked additional network devices for maintenance, causing IP routes to be removed from more devices than intended. This removal disrupted network traffic between Microsoft's West US datacenter and its wide-area network, affecting multiple Microsoft 365 and Azure services. Microsoft engineers traced the problem to the maintenance change, initiated a rollback, and restored affected infrastructure by 2:26 PM ET, with full recovery by 3:41 PM ET. The incident is under a detailed internal review focusing on safety checks and automated maintenance processes.
Potential Impact
The outage caused connectivity failures, increased latency, and service disruptions for numerous Microsoft 365 services including SharePoint Online, Microsoft Teams, OneDrive, and the Microsoft 365 Admin Center, as well as Azure services such as Azure App Service, Azure Kubernetes Service, Azure Cosmos DB, and others. Users experienced errors, degraded functionality, intermittent access, and delays in security-related services like Microsoft Defender. The disruption primarily affected customers accessing services through network infrastructure connected to the West US Azure region. The outage lasted several hours until the maintenance change was rolled back and services were restored.
Mitigation Recommendations
Microsoft has resolved the outage by rolling back the faulty maintenance change and restoring network routes. The company is conducting a full internal review of the automated maintenance request system and safety checks to prevent recurrence. No immediate action is required from customers, but Microsoft initially advised reviewing business continuity and disaster recovery plans as a precaution. Customers should monitor official Microsoft communications for the forthcoming Post Incident Review and any additional guidance.
Threat ID: 6a638a299c2644c7f82fa402
Added to database: 07/24/2026, 15:52:09 UTC
Last enriched: 07/24/2026, 15:52:19 UTC
Last updated: 07/24/2026, 18:00:10 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.