Users may have been unable to access or protect content using ARM in Microsoft 365 services.
- Status
- Service restored
- Feature
- Multiple Applications
- Region
- Not specified (all regions)
- Started
- Oct 12, 2026, 09:00 CEST
- Resolved
- Oct 12, 2026, 12:21 CEST
- Duration
- 3 h 21 min
More info
Impact may have prevented users from encrypting, decrypting, or opening protected files and email messages across Microsoft 365 services that rely on ARM. This included protection capabilities in Microsoft Purview, encrypted documents, protected file uploads and downloads in SharePoint Online, related Power BI and dependent service functionality, and publishing agents or adding skills to existing agents in Microsoft 365 Copilot Chat.
Scope of impact
Some users attempting to encrypt, decrypt, open, upload, or download protected content across Microsoft 365 services that rely on ARM, including Microsoft Purview and Power BI, or publish agents or add skills to existing agents in Microsoft 365 Copilot Chat, may have been impacted.
Root cause
A section of the ARM service infrastructure that facilitates the processing of cached service data was underperforming, resulting in impact.
Next steps:
- We’re reviewing performance data and trends on the affected infrastructure to help prevent similar impact from happening again.
Final status
We’ve determined that a section of the ARM service infrastructure that facilitates the processing of cached service data was underperforming, resulting in impact. We’ve confirmed, following a period of monitoring service telemetry, that the mitigating actions successfully resolved the issue.
Timeline
Every update Microsoft posted for this issue, newest first.
- Oct 12, 2026, 14:13 CEST
We’ve determined that a section of the ARM service infrastructure that facilitates the processing of cached service data was underperforming, resulting in impact. We’ve confirmed, following a period of monitoring service telemetry, that the mitigating actions successfully resolved the issue.
- Oct 12, 2026, 12:42 CEST
We’ve redirected traffic away from affected infrastructure to allow the unhealthy service components to recover. Following this action, we’ve observed service recovery across all affected regions. We’re monitoring service health to confirm that recovery remains stable while we continue investigating the root cause.
- Oct 12, 2026, 11:16 CEST
We’ve identified that some service components responsible for processing ARM requests are in an unhealthy state. We’re attempting to restart the affected components to mitigate impact. We’re seeing early signs of service recovery and are investigating the root cause while evaluating whether additional mitigation actions are required.