Microsoft admits Copilot has a 'bug' that allows it to summarize confidential emails

Microsoft has begun fixing the issue of its AI tool, Microsoft Copilot, which was causing emails marked as 'confidential' to be summarized.

Microsoft says bug causes Copilot to summarize confidential emails

According to Microsoft, a bug was identified that allowed Copilot to import messages with a 'sensitivity label' that was intended to block import, and a fix was released in the first week of February 2026.

The issue occurred in Copilot 'Work' chats, where Copilot was configured to respect data loss prevention policies and sensitivity labels that instructed it not to capture certain content, but an error in the code could result in summarizing messages saved in a user's 'Sent Items' and 'Drafts.'

The issue, which Microsoft is tracking as 'CW1226324,' was first detected on January 21, 2026, after which Microsoft confirmed that it was caused by a code error and began rolling out a fix in early February. The company continues to monitor the deployment and is reportedly contacting some affected users to ensure the fix is working correctly.