Businesses experienced hours-long email disruption Monday as Microsoft confirmed a widespread outage in Exchange Online, causing delays sending and receiving messages, authentication failures, and broken mailbox operations.

Reports of problems began around 11:30 a.m. ET, according to crowdsourced outage data, and by 2 p.m. ET Downdetector was logging more than 5,000 user reports. Microsoft posted to its status account at 12:43 p.m. ET saying it had identified degraded functionality across several Exchange Online features and was reviewing telemetry and diagnostics to isolate the cause.

Microsoft said the root appeared to involve an authentication layer. The company posted, "We've confirmed that users may experience degraded functionality with various Exchange Online functionalities. We're reviewing service telemetry and diagnostic data to isolate the source of the issue," and later added, "We've identified an issue with an authentication component which is contributing to impact. To address this, we've developed a remediation strategy and we're applying it to a portion of infrastructure to test its efficacy." The company warned the authentication problem was affecting services beyond Exchange Online.

In practical terms users reported failures when searching mailboxes, authentication errors, and interruptions to message delivery workflows. Microsoft said its internal tests were ongoing and that it would expand the remediation if the partial deployment resolved the impact. By 5:00 p.m. ET the company was still working to restore full service, noting an apparent misconfiguration that may have prevented authentication components from deploying as expected to a portion of its infrastructure, and that engineers were reexamining recent service changes to determine why.

The outage underscores how dependent many organizations remain on Exchange and Outlook for core business communications. Microsoft is testing a targeted fix and tuning its response, with a broader rollout promised only if the partial deployment proves effective. The company updated its status posts as investigations continued.