Microsoft 365 Copilot Chat referencing info from sensitive emails

AI Security

https://admin.cloud.microsoft/?#/servicehealth/:/alerts/CW1226324

Issue ID CW1226324
A code issue is allowing items in the Sent items and Draft folders to be picked up by Copilot even though confidential labels are set in place and Copilot DLP policy is configured.

Interesting issue posted in 365 Admin Service Health, some pretty serious implications here potentially

Edit: Looks like BleepingComputer picked this up yesterday

https://www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emails/

Posted Feb 19, 2026, 3:43 PM UTC · edited

6216
Loading comments…