Last updated: Friday 13 November 2026, 12:13 pm. We will update this page as the situation develops.
Microsoft 365 services, including Outlook, are down, and countless Friday morning emails were unable to reach their intended recipients.
Here's what we know so far about this outage, which has caused widespread disruption for businesses that depend on Microsoft 365 services, from halting house sales to disrupting public services and resulting in lost multi-factor authentication (MFA) codes.
Unfortunately, this incident is causing disruption far and wide across all industries in 74 countries worldwide.
Here are some sectors which have been hit hardest:
Microsoft says a large number of servers became unavailable after failing automated health checks, which put additional load on the servers that were still running. Early fixes did not hold, and some restored servers failed again.
The problems began at around 6pm on Thursday, UK time. Outage tracker Downdetector logged nearly 130,000 Outlook reports, with reports coming from 74 countries and territories. Microsoft has not said how many customers are affected.
In its latest update, Microsoft said recovery work is now complete across parts of its infrastructure in Asia Pacific, with mailbox access and delayed email processing improving. It is extending the same fixes to other regions, but service remains patchy for some users.
At this stage, they've still not given a time for full recovery or confirmed the root cause.
Microsoft says it has found no evidence of malicious activity, although it hasn't yet confirmed the root cause. The tech giant has attributed the outage to server unavailability and to the strain on the remaining infrastructure.
Many websites and apps use email to prove you are who you say you are: a one-time code, a "magic link" or a password reset link. That's all well and good until your email stops working.
During an unprecedented outage like this one, anyone whose mailbox is down cannot receive those messages, so they're left unable to log in to the services that rely on them: online shops, supplier and customer portals, cloud and finance software, and many more.
Here is some of the most up-to-date security guidance when it comes to MFA best practices and scoring methods:
|
Method |
Strength |
Works if email is down? |
|---|---|---|
|
Codes or links sent by email |
Weakest |
No |
|
Codes sent by text message |
Weakest: open to SIM-swap and phishing attacks |
Yes |
|
Authenticator app |
Stronger: codes are generated on your phone |
Yes |
|
Hardware security key or passkey |
Strongest: resists phishing |
Yes |
Our service delivery team is monitoring the situation and will contact affected clients directly. Please do not rely on email to reach us today. You can call the service desk on 0333 2412322, via CMS, or Microsoft Teams.
If something that should be working isn't, or you're unsure whether the outage is causing the issue, get in touch with the team.
Why can an email outage stop me logging in to other services? Many websites and apps send a one-time code, magic link or password reset link to your email. If your mailbox is down, those messages cannot reach you, so you cannot complete the login.
Is email-based MFA safe to use? It is better than no MFA, so do not switch it off if it is your only option. But security guidance ranks codes sent by email or text as the weakest form of MFA, because they can be intercepted or phished, and email codes depend on your inbox being available. Authenticator apps are stronger, and hardware keys and passkeys are the strongest.
Is Microsoft 365 down? Since Thursday evening, Outlook, Teams, SharePoint, OneDrive and Copilot have been disrupted worldwide. Check Microsoft's service health page for the latest.
Is the Microsoft outage a cyberattack? Microsoft attributes the outage to server unavailability and strain on the remaining infrastructure and has not reported any evidence of a cyberattack.
How long will the outage last? Microsoft has not given a restoration time, and early fixes have not held. We will update this page as soon as we have more information.
What should I do if I am waiting for an important email? Contact the sender by phone, as messages may be delayed. Avoid asking for the same email to be resent several times.
Should I worry about phishing during an outage? Yes. Attackers use big news stories as cover. Be cautious with unexpected emails about the outage, and report anything suspicious to report@phishing.gov.uk