Tag Archives: Teams SharePoint outage

A Forgotten Certificate Just Took Down Microsoft 365 for Millions of Users

The Microsoft cloud outage September incident started with an authentication certificate problem in Exchange Online. It spread within hours to Teams, SharePoint, OneDrive, and Microsoft Defender XDR, disrupting work for businesses worldwide. Microsoft’s own status page tracked the incident under the internal code EX1464935.

The trouble began around 8 a.m. Pacific time on Monday. By Tuesday, Microsoft said core Exchange Online mail flow and search had recovered, though it acknowledged some services were still not fully back to normal.

What triggered the Microsoft cloud outage September incident

Born’s Tech and Windows World reported the root cause traced back to a core authentication configuration issue tied to a certificate that had not been renewed. TechCrunch confirmed the outage dragged into a second day. Users kept reporting intermittent search and calendar failures even as mail delivery stabilized.

Microsoft office signage pictured during the Microsoft cloud outage September incident

Photo: Shijaz, public domain, via Wikimedia Commons.

Which services and users were affected

BleepingComputer listed symptoms ranging from delayed or failed email delivery to broken mailbox search. Teams users also saw calendar problems, and their presence status got stuck instead of updating automatically. Microsoft 365 Business and Enterprise customers were hit hardest, since those plans lean most heavily on Exchange Online for daily operations. Consumer Outlook.com accounts saw more limited disruption by comparison.

Laptop representing the email and productivity tools disrupted by the Microsoft cloud outage September incident

Photo: Raimond Spekking, CC BY-SA 4.0, via Wikimedia Commons.

How Microsoft has responded so far

Microsoft rotated the expired certificate and pushed a fix across affected regions in stages. That staged rollout explains why recovery came unevenly, with some tenants back to normal well before others. The company has not yet published a full post-incident report explaining why the certificate renewal was missed in the first place. Outage-tracking sites note this is not the first cloud-wide disruption tied to a routine maintenance failure this year.

What it cost businesses on the ground

Help-desk teams at several large enterprises reported a spike in support tickets tied to failed logins and missing calendar invites during the outage window. Small businesses that rely on Microsoft 365 for customer-facing email said delayed replies likely cost them time-sensitive deals. No company has published a dollar estimate of the damage. IT consultants say the incident has renewed client interest in backup email routing and offline access to critical files. Many organizations had let those precautions lapse during years of relatively stable service.

Some enterprise customers in regulated industries, including banking and healthcare, say outages like this one complicate their compliance obligations. Several regulators require documented uptime for systems handling sensitive data. A handful of large customers have asked Microsoft for compensation under existing service-level agreements. The exact terms of those agreements vary by contract and are not publicly disclosed. Cybersecurity researchers have also noted that widescale outages create a brief window of confusion. Phishing campaigns sometimes exploit it, since employees expect unusual login prompts and error messages while a real incident is underway.

What happens if outages like this keep happening

Enterprise customers are increasingly asking Microsoft for clearer service-level commitments. They also want faster public disclosure when an outage begins, rather than learning about scope and cause well after the fact. Industry analysts expect cloud outages to remain a recurring risk as more critical business functions concentrate on a small number of providers. A single configuration failure can now ripple across email, chat, and file storage simultaneously. For related coverage on the accountability pressure facing major platforms, see our reporting on the EU’s ChatGPT search engine designation and the ongoing wave of tech layoffs.

Industry publications have warned throughout 2026 that cloud outages are becoming more frequent. Providers are packing more services onto shared authentication and identity systems. When one of those shared systems fails, the effects cascade across products that otherwise have little in common. That is part of why a single expired certificate could take down email, chat, and file storage at the same time. Competing cloud providers have used past Microsoft outages to court enterprise customers considering multi-cloud strategies. Switching core productivity software still remains a slow and costly process for most large organizations.

Outage FAQ: what to know

What caused the Microsoft cloud outage September incident?
Microsoft traced the root cause to a core authentication configuration issue linked to an expired certificate.

Which services were affected?
Exchange Online, Teams, SharePoint, OneDrive, Microsoft Purview, and Defender XDR all reported disruptions.

How long did the outage last?
The incident began Monday morning and stretched into a second day, with core mail flow restored first and some services lagging behind.

Were consumer accounts affected?
Consumer Outlook.com users saw more limited disruption compared with Microsoft 365 Business and Enterprise customers.

Has Microsoft explained why the certificate lapsed?
Not yet. Microsoft has not published a full post-incident report detailing why the renewal was missed.

Could this kind of outage happen again?
Analysts say concentrated reliance on a handful of cloud providers makes repeat incidents likely, since one configuration failure can affect multiple services at once.

Cloud reliability researchers say the incident adds to a growing case study list used in enterprise risk assessments. Several large customers say they now factor outage history directly into vendor renewal negotiations. Microsoft has not said whether it will offer service credits automatically or require affected customers to file individual claims. That distinction matters for smaller businesses without dedicated legal or procurement teams.

Sources: