Microsoft says bug causes Copilot to summarize confidential emails
ThinkingNews Desk · how this was written
Microsoft 365 Copilot contained a bug that allowed the AI to read and summarize confidential emails stored in users’ Sent Items and Drafts folders, bypassing standard data-protection policies and exposing sensitive information. The issue was present from late January, and Microsoft deployed a fix in early February.
Written from all 3 reports below, not from any single one.
How it was reported
- Hacker News·Microsoft says bug causes Copilot to summarize confidential emails
Microsoft's Copilot has a bug that causes it to summarize confidential emails. This issue may compromise sensitive information. The company is likely working to resolve the problem.
- TechCrunch·Microsoft says Office bug exposed customers’ confidential emails to Copilot AI
Microsoft's Copilot AI chatbot accessed confidential emails of paying customers due to a bug. The bug bypassed data protection policies, allowing the AI to read and summarize sensitive information. Confidential emails were exposed as a result.
- TechMeme·Microsoft confirms a bug that let Microsoft 365 Copilot summarize confidential emails from Sent Items and Drafts folders, and deployed a fix in early February (Sergiu Gatlan/BleepingComputer)
Microsoft 365 Copilot had a bug that summarized confidential emails from Sent Items and Drafts folders. The issue occurred since late January. A fix was deployed in early February.
Related stories
- Microsoft's Copilot app adds Office, natural coding and automation3 outlets
- Microsoft overhauled Copilot's design in Microsoft 365 with a minimalist black-and-white, text-focused interface aimed at creating a more consistent experience (Ian Carlos Campbell/Engadget)3 outlets
- A researcher says a vulnerability in Apple's Hide My Email tool lets anyone discover a real email address; first reported in June 2025, Apple is yet to fix it (Joseph Cox/404 Media)3 outlets
- Windows Notepad App Remote Code Execution Vulnerability3 outlets