An operational incident at Microsoft disrupted the ability of some users to set up MFA and access the My Sign-Ins service due to a cache configuration change that triggered failover and resource exhaustion under peak EU traffic. This caused 504 Gateway Timeout errors and service unavailability. Microsoft mitigated the impact by failing over to alternate infrastructure and subsequently rolling back the change to restore normal service. The issue was classified as an ongoing incident with noticeable user impact but was not linked to a security vulnerability or exploit. Monitoring and optimization efforts continue to stabilize the service.

The impact was limited to service availability, preventing some users from setting up MFA or accessing the My Sign-Ins platform temporarily. There is no indication of data compromise, unauthorized access, or exploitation of a security vulnerability. The outage could have affected user convenience and security posture due to inability to configure MFA during the incident window.

Microsoft has completed mitigation by failing over to alternate infrastructure and rolling back the cache configuration change that caused the outage. The vendor is monitoring service telemetry to ensure full recovery and stability. Since this is a service outage rather than a vulnerability, no user action is required beyond retrying access. Patch status is not applicable. Users should follow Microsoft 365 Status updates for ongoing information.