CyberHoot Advisory: Microsoft Outlook is Down. Your Good Judgement is Not.

13th November 2026 | Advisory, Blog CyberHoot Advisory: Microsoft Outlook is Down. Your Good Judgement is Not.

On Thursday, November 12, 2026, around 11 a.m. Eastern, Microsoft Outlook stopped working for people around the world. Users lost access to their mailboxes on the web, in the app, and on phones. Emails arrived late or not at all. Teams and Copilot saw partial disruptions too.

By early Thursday afternoon, Downdetector logged about 130,000 Outlook problem reports. On Friday morning, Microsoft reported partial recovery in some regions, but some restored servers failed again. Microsoft has not given a time for full recovery.

Here is the potentially calming part. Microsoft says this outage is not a cyberattack. The company points to elevated load on its servers and is rolling back a network change while it restarts affected services. If you use desktop Outlook, you will still be able to see emails downloaded before the outage. Also, Microsoft Teams chats and calls have largely kept working.

When millions of people lose email at once, scammers send fake messages pretending to help. They copy Microsoft logos and borrow real outage language from the news, so their messages look timely and official.

During a Microsoft outage in January 2026, security researchers at McAfee tracked these tricks:

  1. Fake “service restored” emails asking you to sign in again to get your mailbox back.
  2. Text messages with a link to “reactivate” or “verify” your account.
  3. Fake Microsoft support phone numbers posted online or sent in messages.
  4. Urgent “fix” downloads or payment requests to restore service.

Expect the same tricks moving forward. Each one leads to a fake login page or a fake helper whose goal is your password.

Microsoft fixes this outage on its own servers. You do not need to do anything to get your email back.

So any message asking you to sign in, download a tool, pay a fee, or call a number to restore Outlook is a fake. No exceptions this week. Delete it, report it to your IT contact, and give yourself a high five for spotting it.

Skip the links in emails and texts. Go straight to the source instead.

  • Type https://status.cloud.microsoft/ into your browser yourself to see Microsoft 365 service status.
  • Follow the Microsoft 365 Status account on X (@MSFT365Status) for live updates.
  • If you manage IT, open Service health in the Microsoft 365 admin center.
  • Ask your IT team or managed service provider. They are watching this closely.

Email delays create a second risk. A scammer might text or call pretending to be a vendor, a coworker, or your boss, saying “email is down, so here is the new bank account for the invoice” or “please buy these gift cards for me today.”

Before you move money or change payment details, call the person back at a phone number you already have on file. A 60-second phone call stops the most costly scams.

Mistakes happen, especially when everyone is busy and stressed. What matters is acting fast.

  1. Tell your IT contact or manager right away. Speed helps far more than worry. Follow their advice first. What follows are suggestions to confirm with your IT team.
  2. Change your Microsoft password by typing the Microsoft sign-in address yourself.
  3. Change the password on any other account where you used the same one.
  4. Turn on multifactor authentication (MFA), or confirm it is still on.
  5. Review recent sign-in activity on your Microsoft account for anything unfamiliar.

Sources


Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

CyberHoot Advisory: Microsoft Outlook is Down. Your Good Judgement is Not.

CyberHoot Advisory: Microsoft Outlook is Down. Your Good Judgement is Not.

What Is Happening On Thursday, November 12, 2026, around 11 a.m. Eastern, Microsoft Outlook stopped working...

Read more
Malicious Browser Extensions: How to Keep Your Browser Clean

Malicious Browser Extensions: How to Keep Your Browser Clean

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: “Power tends to corrupt,...

Read more
Your Calendar Has an Uninvited Guest

Your Calendar Has an Uninvited Guest

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: For years we've trained...

Read more