Microsoft 365 Alert – Service Degradation – Microsoft Defender XDR – Users may be unable to view Zero-hour auto purge (ZAP) email messages in Microsoft Defender for Office 365 quarantine – ONGOING

11/03/2026 09:05:00 AM

NHSmail Reference: INC46770275

Microsoft Reference: DZ1247911

Issue Status: ONGOING

Issue Description: Users may be unable to view Zero-hour auto purge (ZAP) email messages in Microsoft Defender for Office 365 quarantine.

More info: Users and admins may see no results when searching for ZAP email messages or affected recipients of the ZAP email messages that were moved to quarantine.
As a workaround, admins can view the ZAP email messages in Threat Explorer, but won’t be able to download or release the messages from quarantine.

Current Update: 11/03/2026 09:05:00 AM –Microsoft has determined the root cause is a recent code change that resulted in specific permissions required to complete the process for admins to view ZAP email messages being unavailable. We’ve developed a solution and are starting to deploy the fix to our internal testing environment. Once the deployment is complete, we will test to confirm it mitigates impact as expected before proceeding with a broader rollout.

Scope of impact: Your organization may be affected by this event, and any user trying to view or download ZAP email messages in Microsoft Defender for Office 365 quarantine may be impacted. This information may be updated as our investigation continues.

Root cause: Specific permissions required to complete the process for admins to view ZAP email messages within quarantine aren’t available due to a recent code change, resulting in impact.

Next update by: Wednesday, March 11, 2026, at 10:00 PM UTC