When Automation Goes Wrong
In a post-incident review, Microsoft has attributed Thursday's major global outage affecting Azure and Microsoft 365 to a flaw in its automated network maintenance request system. The bug caused the system to remove IP routes from a far larger number of network devices than intended — triggering cascading service disruptions across the Microsoft cloud ecosystem.
Outage Summary
| Field | Details |
|---|---|
| Date | July 24, 2026 |
| Root Cause | Bug in automated network maintenance system |
| Mechanism | IP routes removed from excess devices |
| Services Affected | Azure, Microsoft 365 (Exchange, Teams, SharePoint, OneDrive) |
| Geographic Scope | Global |
| Post-Mortem Published | July 25, 2026 |
Root Cause: Automated Maintenance Gone Awry
Microsoft's network operations rely on automated systems to handle routine maintenance tasks — including route management, IP address allocation, and configuration updates. During the incident, a bug in the maintenance request system caused it to issue route-removal commands to a broader set of network devices than the maintenance window was scoped for.
Expected behavior:
Maintenance system targets → N specific devices
IP routes removed → N device configurations updated
Traffic rerouted → minimal user impact
Actual behavior (bugged):
Maintenance system targets → N × M devices (unintended)
IP routes removed from excess devices
Network topology degraded → routing failures cascade
Azure backbone connectivity lost across regions
Microsoft 365 services unable to reach backend infrastructureThe result was a cascading failure as downstream services relying on the affected network paths began returning errors. Microsoft's redundancy systems partially mitigated impact, but the scale of the unintended route removal exceeded failover capacity in multiple regions.
Services Impacted
| Service | Impact |
|---|---|
| Exchange Online | Email delivery delayed or failing |
| Microsoft Teams | Meeting joins, messaging, and file sharing disrupted |
| SharePoint Online | Document access failures |
| OneDrive | Sync and access errors |
| Azure Portal | Management plane intermittently inaccessible |
| Entra ID (Azure AD) | Authentication delays affecting downstream apps |
| Dynamics 365 | CRM and ERP access disrupted |
| Power Platform | Power Automate workflows failing |
Microsoft's Response Timeline
T+00:00 — Automated maintenance request system issues route-removal commands
T+00:12 — Monitoring detects elevated error rates across Azure regions
T+00:18 — Microsoft engineers begin incident investigation
T+00:35 — Root cause identified: excess route removals by maintenance system
T+00:50 — Manual route restoration begins across affected devices
T+02:30 — Majority of services restored to normal operation
T+24:00 — Full post-incident review publishedWhy This Keeps Happening
Microsoft 365 outages linked to infrastructure automation failures have become a pattern:
| Date | Cause | Impact |
|---|---|---|
| July 2026 | Maintenance system bug — excess route removal | Global M365 + Azure disruption |
| July 2024 | CrowdStrike sensor update — kernel panic on Windows | Global Windows BSOD event |
| September 2023 | Configuration change propagation error | Worldwide Teams outage |
| March 2023 | WAN routing error during maintenance | Azure AD + M365 disruption |
The common thread: automation amplifies mistakes. A bug that would affect one device manually can affect thousands when executed by an automated system at scale.
Lessons for Enterprise IT Teams
1. Diversify Critical Workloads
# Example: Deploy across multiple cloud providers for critical services
primary_email: Microsoft 365
backup_email: Google Workspace (or on-prem)
communication_fallback: Slack / Signal / Matrix (non-M365)2. Monitor for Microsoft Service Health Proactively
# Microsoft 365 Service Health via Graph API
curl -H "Authorization: Bearer $TOKEN" \
"https://graph.microsoft.com/v1.0/admin/serviceAnnouncement/healthOverviews"Alternatively, subscribe to the Microsoft 365 Admin Center service health dashboard and configure email/webhook alerts for your tenant.
3. Test Business Continuity Plans
- Verify staff know how to use alternative communication channels when Teams is down
- Confirm critical workflows have non-M365 fallback paths
- Test email continuity features (e.g., Exchange Online backup MX or journaling)
4. Document Escalation Paths
When M365 is down, internal comms tools (also M365-based) often fail simultaneously. Pre-establish out-of-band communication:
| Scenario | Alternative |
|---|---|
| Teams down | Slack, Signal group, SMS tree |
| Email down | Phone tree, backup SMTP relay |
| SharePoint down | Shared network drive, local copies |
What Microsoft Said
In its official post-incident communication, Microsoft stated:
"A bug in our automated network maintenance request system caused it to remove IP routes from more devices than was intended during a maintenance operation. This resulted in degraded connectivity across multiple Azure regions and disrupted Microsoft 365 services. We have identified and remediated the root cause and have put safeguards in place to prevent recurrence."
Microsoft has committed to reviewing its automated maintenance system with additional validation gates to prevent out-of-scope device targeting in future maintenance windows.
Sources
- BleepingComputer — Microsoft blames massive Microsoft 365 outage on maintenance bug
- Microsoft Azure Status History
- Microsoft 365 Service Health Dashboard