Microsoft Copilot bug lets AI read you private emails
2026-02-19
NewsBytes
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A bug in Microsoft 365 Copilot Chat allowed the AI assistant to access and summarize confidential emails, bypassing organizations' Data Loss Prevention (DLP) policies. This unauthorized processing of sensitive information led to privacy breaches. Microsoft acknowledged the issue, deployed a fix, and raised concerns about AI-related data security risks in workplace tools.[AI generated]
Why's our monitor labelling this an incident or hazard?
Microsoft 365 Copilot is an AI system integrated into productivity apps, and the bug caused unauthorized access to private emails, constituting a violation of privacy rights. This is a direct harm caused by the AI system's malfunction, fitting the definition of an AI Incident due to breach of obligations protecting fundamental rights.[AI generated]