On a Friday morning, as Australians began their working week, the quiet infrastructure that carries their email and meetings faltered without warning. Microsoft 365 went dark before dawn, and by the time offices opened, schools, courts, government counters and clinics were relearning the older arts of the telephone, the text message and the paper form. The cause, as far as anyone could tell, lay not in an attack but in the ordinary fragility of machines that must be configured correctly and cannot always be trusted to stay that way.
Microsoft 365 Outage Forces Australian Government, Schools and Courts Back to Phone and Paper
Back in time: phone calls, paper scripts and texts replaced email
Mark
Why does an email outage reach courts and clinics?
Mimi
Because email is often the key to other systems. Doctors' prescribing software asks for multifactor verification, and that needs a Microsoft-supported email. Some facilities went back to paper scripts.
Luke
But the AMA says patient care wasn't affected. That's the AMA's account of reports it received, not a count of every clinic.
Mark
What do we actually know about the cause?
Mimi
Microsoft said it had no indication of a cyber-attack and suggested a server configuration change may have overloaded some servers.
Luke
Note the wording: suggested, could be related. It isn't a confirmed root cause. And the RMIT professor's Optus comparison is his reading of how it appeared, not Microsoft's finding.
Mark
Was the outage evenly felt?
Mimi
No. Coles and Woolworths stores ran normally, though Coles lost internal email. Some Reddit users said Teams still worked.
Luke
And the 5,500 figure is Down Detector reports at the peak. That measures complaints, not the number of affected users.
Mark
What about ASIO and the AFP?
Mimi
Both said they were affected, but Burgess said only on one level, not completely. No further detail was given.
Luke
Which means we don't know how much it disrupted them. Also unknown is when it will be fixed, since Microsoft said its fix wasn't going as expected.
Le Pouls
- Outlook and Teams fell silent across Australia before 5am, and by the time offices opened, the disruption had spread through schools, courts and government agencies.
- Reports to Down Detector surged past 5,500 at their 9.22am peak, as staff and parents scrambled to reach one another by phone and SMS.
- Service NSW asked residents to delay visits and set up priority callbacks, while clinics fell back on paper prescriptions because login verification would not clear.
- Microsoft admitted its fix was not progressing as expected, pointing to a server configuration change that left machines overloaded and offline.
- Scammers are circling the confusion, and the National Cyber Security Coordinator is urging people not to click unexpected links or hand over personal details.
On a Friday morning, as Australians began their working week, the quiet infrastructure that carries their email and meetings faltered without warning. Microsoft 365 went dark before dawn, and by the time offices opened, schools, courts, government counters and clinics were relearning the older arts of the telephone, the text message and the paper form. The cause, as far as anyone could tell, lay not in an attack but in the ordinary fragility of machines that must be configured correctly and cannot always be trusted to stay that way.
Just before 5am AEST on Friday, Australians started reporting that Microsoft 365 was failing. By the time offices opened, email and online meetings had gone dark across schools, courts and government agencies, and people were falling back on phone calls, text messages and paper.
Reports to Down Detector peaked at 9.22am with more than 5,500 complaints, many about trouble opening or sending email. Later in the afternoon Microsoft said its repair efforts were not taking as expected. A spokesperson said there was no sign of a cyber-attack and suggested a configuration change on its servers had left some of them overloaded and offline.
Service NSW asked customers to delay visits and offered priority callbacks for urgent matters. Home Affairs Minister Tony Burke, alongside the Australian Federal Police and ASIO, confirmed their systems had been affected, though without detail. In health, the Australian Medical Association reported that some clinics had returned to paper scripts, since prescribing software relies on multifactor checks that run through Microsoft email. It stressed that no direct patient care had been affected.
Schools and courts felt the strain too. A NSW school administration platform lost email access, and parents were asked to phone the office instead. Courts in South Australia and Victoria reported email trouble, though Victoria's County Court expected its hearings to proceed. Not everything stopped: Coles and Woolworths kept trading, and the NBN was unaffected. The cyber security coordinator warned people to be wary of scam messages in the confusion. An RMIT engineer suggested the fault sat in Microsoft's network layer, possibly like the 2023 Optus misconfiguration, and the question now is whether Microsoft confirms that once service returns.
Just before 5am AEST on Friday, Australians began reporting that Microsoft 365 was failing. By the time offices opened, email and online meetings had gone dark across schools, courts and government agencies, and people were falling back on phone calls, text messages and paper.
According to Down Detector, reports of problems peaked at 9.22am, with more than 5,500 of them, many involving trouble opening or sending emails. Reports then began to dip. On Friday afternoon, though, Microsoft updated its website to say that efforts to fix the problem were not "taking as expected". A company spokesperson said there was no indication of a cyber-attack and suggested the cause could be a configuration change to its servers, which left some of them overloaded and taken offline.
Service NSW, the agency through which residents, drivers and business owners access government services, asked customers to delay visits to its service centres. It said some transactions in service centres and call centres were unavailable, and urged people to complete transactions online where possible. For those with urgent matters they could not finish during the outage, it set up a priority callback system.
Earlier in the morning, Home Affairs Minister Tony Burke held a press conference with Australian Federal Police Commissioner Krissy Barrett and ASIO Director-General Mike Burgess. Both said their systems had been affected, without giving further detail. Burgess said the spy agency's systems operate on multiple levels, and had been hit "on one level, yes, but not completely".
In health, the Australian Medical Association said it had heard of clerical problems at some hospitals and clinics, but no effect on patient care. Its president, Dr Michael Bonning, said some facilities had gone back to paper scripts. Much prescribing software requires multifactor verification, which depends on being able to reach a Microsoft-supported email account. He said none of these tools are used for direct patient care, and that the problem lies in authorisation to get into systems, for which workarounds always exist.
Schools felt it too. Schoolbytes, a cloud-based administration platform used by schools in NSW, was temporarily unable to access emails. A text sent to one parent asked anyone who had emailed the school after 3.15pm the previous day, or who needed to report an absence or a change to routine, to phone the office. In South Australia and Victoria, courts said their email systems were affected, though Victoria's County Court expected scheduled hearings to go ahead as planned.
On social media, people described their workdays. A Brisbane LinkedIn user wrote that it was all SMS and phone calls, and that staff would have to talk to people while Microsoft sorted out its email. On Reddit, some users reported that Teams still worked while Outlook was down, and one complained that it should have gone down too, so they could sit and do nothing.
Not everything stopped. Coles and Woolworths stores operated as normal, although Coles said its internal email system was hit. The National Broadband Network said it was monitoring the situation but was unaffected. The National Cyber Security Coordinator warned that criminals often exploit the uncertainty around such disruptions with scam emails, texts, calls and social media messages. The coordinator urged people not to click unexpected links, open attachments or give out personal information, and to hang up and call back if unsure.
Mark Gregory, an associate professor in RMIT University's School of Engineering, said the failure appeared to be in the network layer of Microsoft's systems, and might resemble the configuration fault that took down Optus's network in 2023. When some servers are misconfigured, he explained, customers share a smaller pool; the remaining servers become overloaded and fail, producing a cascading problem that takes time to trace to its source. What to watch next is whether Microsoft confirms a network-layer misconfiguration as the root cause once service is restored.
Citations marquantes
Some facilities have returned to paper for scripts because authentication requires multifactor verification via Microsoft-supported email.— Dr Michael Bonning, AMA president (paraphrased)
ASIO's systems were affected on one level, but not completely.— Mike Burgess, ASIO director-general (paraphrased)
Envie de l'histoire complète ?
Lire l'original sur The Guardian ↗