press release
Published: 13 November 2026

Commentary: Why the Microsoft outage is leaving users unable to access even their oldest emails

As widespread disruption to Microsoft services leaves users unable to access their emails, including messages dating back years, Professor Nishanth Sastry, Associate Head of Research and Innovation at the University of Surrey’s Centre for Cyber Security, explains what may have caused the outage and why modern email systems can leave users locked out of their own inboxes.

Professor Nishanth Sastry
Professor Nishanth Sastry

“I am not sure that this is AI-related. There seems to be some suggestion that this might be due to configuration issues. One of the comments in a Hacker News discussion says “our review of recent changes has identified a small number of configuration updates that we’re investigating as potential contributors to the issue”.

“The symptom is that some servers are failing health checks, which say whether the server is operational or not. This failure then leads traffic to be routed to other servers. If sufficient numbers of servers fail health checks at the same time, then the remaining servers get overloaded, sort of like when there is a bug like a cold going around and many employees call in sick, leading to overload on the other employees. This shows up as an availability issue wherein Microsoft services are not able to be accessed.

“It is ironic that this means we are not able to access emails, including old emails from yesterday or years back. Email was designed in a world where we couldn’t and didn’t expect always-on connectivity. Protocols like IMAP and even Classic Outlook clients allow us to access emails on our own machines. But more recent updates to Outlook have emphasised live sessions and authentication, which means we are thrown out of our accounts during availability incidents like this. Of course, many simply use the web-based Outlook, which does not leave offline copies at all.

“A simple fix is to use a standards-compliant IMAP client like I do, which means, even if I cannot receive new email, I still have access to my entire past email database even if I am disconnected due to incidents like this. Keeping ourselves ready for disconnection should be part of our “prepping” process, which the government has recently started advocating. This is useful not just when we have config issues etc., but also if there is an active attack that takes down global infrastructure.”

Share what you've read?

Media Contacts


External Communications and PR team
Phone: +44 (0)1483 684380 / 688914 / 684378
Email: mediarelations@surrey.ac.uk
Out of hours: +44 (0)7773 479911