Microsoft says an Office bug exposed confidential customer emails to Copilot AI

Microsoft has confirmed that a bug allowed its Copilot AI software to summarize confidential customer emails for weeks without permission.

The bug was first reported by Sleeping computerhas allowed Copilot Chat to read and outline the contents of emails since January, even if customers had data loss prevention policies in place to prevent their sensitive information from being absorbed into Microsoft’s large language model.

Copilot Chat allows paying Microsoft 365 customers to use the AI-powered chat feature in Office products, including Word, Excel, and PowerPoint.

Microsoft said the error could be traced back to officials CW1226324means that draft and sent emails “with a confidentiality label applied are incorrectly processed by Microsoft 365 Copilot Chat.”

The tech giant said it began rolling out a fix for this flaw earlier in February. A Microsoft spokesperson did not respond to a request for comment, including a question about how many customers were affected by the flaw.

Earlier this week, the IT Department of the European Parliament He told lawmakers They blocked AI features built into their work-issued devices, citing concerns that AI tools could upload potentially confidential communications to the cloud.