Abnormal Security incident

Email Delivery, Detection, and Remediation Disruption for Microsoft 365 Customers

Ongoing since 06:21 PM UTC, affecting Inbound Email Security (IES) and Inbound Email Security (IES)(Fedramp) and 1 more.

identified Nov 12, 2026, 06:21 PM UTC

Starting at 17:20 UTC on November 12, 2026, Abnormal began experiencing a service disruption affecting Inbound Email Security, AI Security Mailbox, and Graymail for some hosted US and EU customers using Microsoft 365. Affected customers may experience delays in threat detection, removal of malicious emails, processing of reported suspicious emails, and Graymail filtering. Initial findings also indicate that most Inline Microsoft 365 emails routed through Abnormal before delivery are being held up, potentially delaying delivery to recipients. Customers using Google Workspace are unaffected. Abnormal is investigating the issue and will provide further updates as more information becomes available.

Started
Nov 12, 2026, 06:21 PM UTC
Resolved
Ongoing
Duration
● 12m
Detected by Pingoru
Nov 12, 2026, 06:21 PM UTC

Affected components

Inbound Email Security (IES)Inbound Email Security (IES)(Fedramp)AI Security Mailbox (AISM)AI Security Mailbox (AISM)(Fedramp)

Update timeline

  1. identified Nov 12, 2026, 06:21 PM UTC

    Starting at 17:20 UTC on November 12, 2026, Abnormal began experiencing a service disruption affecting Inbound Email Security, AI Security Mailbox, and Graymail for some hosted US and EU customers using Microsoft 365. Affected customers may experience delays in threat detection, removal of malicious emails, processing of reported suspicious emails, and Graymail filtering. Initial findings also indicate that most Inline Microsoft 365 emails routed through Abnormal before delivery are being held up, potentially delaying delivery to recipients. Customers using Google Workspace are unaffected. Abnormal is investigating the issue and will provide further updates as more information becomes available.

Your product runs on more than Abnormal Security

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →