Microsoft’s flagship productivity AI for Microsoft 365 has a glaring privacy problem: for weeks a code error allowed Copilot Chat to read and summarize emails that organizations had explicitly labelled as confidential, bypassing Data Loss Prevention (DLP) controls and undermining a core tenant...
Microsoft’s own service advisory confirms that a logic error in Microsoft 365 Copilot allowed the assistant to process and summarize email messages labeled “Confidential” in users’ Sent Items and Drafts folders — and that the company began rolling a server-side fix in early February 2026...