Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.

Kevin Beaumont

For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.

Microsoft says bug causes Copilot to summarize confidential emails

Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.

BleepingComputer (www.bleepingcomputer.com)

Dave Mac Farlane

@GossiTheDog@cyberplace.social surprised pikachu.gif

The Orange Theme

@GossiTheDog Lol. Lmao, even.

Infoseepage

@GossiTheDog This is the same sort of shit as with Recall, where numerous people sounded the alarm that the feature was going to hoover up all sorts of stuff you really didn't want to be in an easily searchable index and then they implemented some half assed controls after the fact. Same shit, different week.

Josh Grant

@GossiTheDog Goin well

LΞX/NØVΛ 🇪🇺

@GossiTheDog yeah a "BUG"

enthraxxx

@GossiTheDog Geez, I wonder why Microsoft chose to hide this.
Maybe with this lot we can make them famous!

And for good measure, let's also remember Satya's words on the company's commitment to security. It went something like this: "We're prioritizing ***security*** above all else through ***Microsoft's*** Secure Future Initiative (SFI). SFI is a multiyear effort to revolutionize the way we design, blah blah blah."

Security remains our top priority as a company, and we're sharing an update on the progress we are making across the objectives we outlined a year ago. | Satya Nadella | 80 comments

Security remains our top priority as a company, and we're sharing an update on the progress we are making across the objectives we outlined a year ago. | 80 comments on LinkedIn

(www.linkedin.com)

What a clown.

Tobias Frech

@GossiTheDog Was Copilot or Claude involved in the implementation somehow?

fuzzyfuzzyfungus

@GossiTheDog This seems uncomfortably similar to the issue where copilot was able to 'summarize' documents without leaving a trace of accessing them in the audit log.

It's as though everything gets munged into RAG vectors or whatever ahead of time; and then they are trying to apply the effect the controls should have after the fact.

Eric Burger

@GossiTheDog more about problem and fix here with Tony Redmond (Office365ITPros): https://office365itpros.com/2026/02/13/dlp-policy-for-copilot-bug/

Moz

@lexinova @GossiTheDog confidential information has definitely leaked. Us peasants were not supposed to know what MS does with our data.

João Tiago Rebelo (NAFO J-121)

@lexinova a bug. As in a digital "listening" device planted by Microslop for (at least the) US police/authorities to hoover up all that juicy confidential data somewhere else.
@GossiTheDog

Serghei Pogor

So the AI assistant designed to help you write documents is now deleting your documents

At some point we need to ask: are we adding AI because it solves a problem, or because someone in a boardroom decided every product needs an AI checkbox for the next earnings call

This is what happens when you ship features to impress investors instead of users

Ox1de

@GossiTheDog fuck all the dicks that are not held accountable

Kristy

@GossiTheDog They would never...

Reiner Jung 🇬🇱 🇺🇦 🇪🇺

@GossiTheDog while generating summaries might be a benefit. Why delete the original mail? How can one implement such a feature so lousy? (rhetorical question)

littlecurses

@GossiTheDog every time I read anything on microsoft, the image my brain conjures up is pedo-pal gates photo and the red string connections he has to accessing hundreds of thousands of children via school systems

chrisp

@GossiTheDog Microsoft: "Ooooh...whoops"

KanaMauna

@GossiTheDog

So...exactly according to plan.

Cruiser 🇪🇺🇺🇦🇬🇱🇨🇦🇲🇽

@GossiTheDog As if we needed more arguments to abandon US based tech 🫠

Wandering Adventure Party

Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.