If your phone lit up Thursday afternoon with “is email down for you too?” messages, you weren’t alone. Microsoft 365 had one of its worst days in years, and as I write this on Friday it still isn’t fully back. Outlook mailboxes wouldn’t open, mail queued up for hours, and a long list of services that quietly lean on Exchange Online went sideways with it.<\/p>\n\n\n\n
I’ve been watching the service health updates roll in all night, and what stands out isn’t just the length of the outage. It’s how a failure in one core service cascaded through so much of the stack.<\/p>\n\n\n\n
Microsoft’s Exchange Online incident, EX1550543, started around 16:17 UTC on Thursday, November 12, according to the incident timeline LazyAdmin has been tracking. A broader incident for dependent services, MO1550821, followed about two hours later, which is why some outlets put the start closer to 18:00 UTC. Within roughly an hour, Downdetector was logging Outlook complaints from more than 70 countries, and Forbes reported reports peaking around 130,000 on Thursday afternoon.<\/p>\n\n\n\n
The blast radius went well beyond email. Depending on which update you read, the affected list included:<\/p>\n\n\n\n
Al Jazeera noted that government systems in Singapore, Japan, Australia and the Philippines were caught up in it too. Microsoft says there’s no sign of a cyberattack.<\/p>\n\n\n\n
This is the part I find most interesting as someone who has broken plenty of things in a lab. Microsoft’s explanation shifted overnight, which is normal for a live incident, but the shape of the problem is pretty clear.<\/p>\n\n\n\n
Servers started failing automated health checks and dropped out of rotation. Their traffic transferred to the remaining servers, which then got overloaded and failed too. Microsoft later said a process that sets up secure connections was getting overwhelmed. Every time engineers brought a batch of servers back, they got slammed by reconnecting clients and fell over again. That’s a classic thundering-herd problem, and it’s brutal at Microsoft’s scale.<\/p>\n\n\n\n
The cause is still officially unconfirmed. Early Thursday evening Microsoft said it hadn’t found a recent change that lined up with the outage. A few hours later it began reverting a network configuration change that, in its words, “correlates with the start of impact,” according to WindowsForum’s rundown of the updates. There’s also some confusion about load: The Register quoted Microsoft talking about a “traffic influx,” while Microsoft later clarified that the extra load came from servers going unavailable, not from more users. By Friday morning, Al Jazeera reported Microsoft claiming only “marginal success,” and Forbes cited a newer update reporting better server stability after a patch, but nobody has given a time for full recovery yet.<\/p>\n\n\n\n
This is the third big Microsoft 365 disruption this year, after a roughly 10-hour North American outage in January and an Outlook lockout in August. If you run a tenant, a few practical points:<\/p>\n\n\n\n
Every time something like this happens, the self-hosting crowd (me included) feels vindicated with a sense of “See, I told you so!”. Let’s be real, though: running your own mail server is its own kind of pain, and very few of us beat 99.9% at home. The real lesson isn’t “leave the cloud.” It’s that putting email, chat, security and device management behind one vendor’s single service creates one very large point of failure.<\/p>\n\n\n\n
Thinking through that concentration risk is the kind of exercise a homelab is great for. Spin up a backup notification path, test what happens to your setup when your email provider goes dark, and figure out which of your “independent” tools aren’t actually independent.<\/p>\n\n\n\n
Outages happen to everyone, and I don’t envy the engineers fighting this one. But three major incidents in one year, plus a dependency chain this deep, should prompt a real conversation in a lot of IT departments. I’ll be watching for Microsoft’s post-incident report, and I hope it’s more candid than usual.<\/p>\n\n\n\n
How did your org handle it? Did you have a fallback channel ready, or did you find out the hard way that everything runs through Exchange? Let me know.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Microsoft 365 has been down or degraded for more than 18 hours, taking Outlook, Intune, Defender and more with it. Here’s what we know and what IT teams should take away.<\/p>\n","protected":false},"author":2,"featured_media":143,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[14],"tags":[22,25,24,26,23],"class_list":["post-158","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-news","tag-cloud","tag-exchange-online","tag-microsoft","tag-microsoft-365","tag-outage"],"_links":{"self":[{"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/posts\/158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/comments?post=158"}],"version-history":[{"count":4,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/posts\/158\/revisions"}],"predecessor-version":[{"id":162,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/posts\/158\/revisions\/162"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/media\/143"}],"wp:attachment":[{"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/media?parent=158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/categories?post=158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudwraith.com\/news\/wp-json\/wp\/v2\/tags?post=158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}