Jul <var data-var='date'> 7</var>, <var data-var='time'>21:44</var> PDT Resolved - As of 04:44 UTC on July 8, 2026, all services have fully recovered and are now live processing traffic for US and EU tenant customers. Abnormal will reprocess all messages received during the impact window to ensure full security analysis is applied. If you experience any continued issues, please reach out to the support team at support@abnormalsecurity.com. Jul <var data-var='date'> 7</var>, <var data-var='time'>20:52</var> PDT Monitoring - Abnormal has begun to see early signs of recovery for Inbound Email Security services impacting US and EU tenant customers. The Abnormal engineering team continues to monitor for full recovery. During this time, some emails may still experience delayed security analysis. The next update will be provided once full recovery is confirmed. Jul <var data-var='date'> 7</var>, <var data-var='time'>19:33</var> PDT Update - The Abnormal engineering team continues to work on restoring full Inbound Email Security services for US tenant customers. During this time, some emails may still be delivered without full security analysis. Additionally, Abnormal has identified that this issue is beginning to impact EU tenant customers, which the engineering team is actively addressing. The next update will be provided within 60 minutes or sooner as more information becomes available. Jul <var data-var='date'> 7</var>, <var data-var='time'>18:20</var> PDT Update - As of 00:23 UTC on July 8, 2026, AI Security Mailbox and Portal services have been fully restored for US tenant customers. The Abnormal engineering team is currently deploying a mitigation for Inbound Email Security services, which are expected to be fully restored within the next 30 minutes. During this time, some emails may still be delivered without full security analysis. The next update will be provided once Inbound Email Security services are confirmed restored. Jul <var data-var='date'> 7</var>, <var data-var='time'>17:08</var> PDT Update - Abnormal continues to experience a service disruption impacting Inbound Email Security detection and email remediation for US tenant customers that began at 22:00 UTC on July 7, 2026. During this time, emails may be delivered without full security analysis, and some customers may be unable to login to the Abnormal Portal. The Abnormal engineering team continues to actively work on restoring full functionality. The next update will be provided within 1 hour or sooner as more information becomes available. Jul <var data-var='date'> 7</var>, <var data-var='time'>15:58</var> PDT Investigating - Starting at 22:00 UTC on July 7, 2026, Abnormal began experiencing a service disruption impacting Inbound Email Security detection and email remediation for US customers. During this time, inline customers may have emails delivered without security scoring or remediation, and Inbound Email Security detection is degraded. Additionally, AI Security Mailbox is experiencing issues within the portal which the Abnormal team is actively investigating. Our team is working to restore full functionality. The next update will be provided within 1 hour or sooner as more information becomes available.

Inbound Email Security, AI Security Mailbox, and Portal Disruption – US and EU Tenant Customers

Jun <var data-var='date'> 5</var>, <var data-var='time'>11:03</var> PDT Resolved - Between 16:45 UTC and 17:25 UTC on June 5, 2026, Abnormal experienced message remediation delays affecting Inbound Email Security for GOV customers. During this time, some emails may have experienced delayed remediation. The Abnormal engineering team actively worked to address the issue, and service was fully restored as of 17:25 UTC. All emails from the impacted window have since been reprocessed. If you experience any further issues, please reach out to our support team at support@abnormalsecurity.com.

Inbound Email Security Message Remediation Delays – (GOV)

Jun <var data-var='date'> 4</var>, <var data-var='time'>15:07</var> PDT Resolved - Between 20:00 UTC and 21:22 UTC on June 4, 2026, Abnormal experienced a service disruption impacting inbound email ingestion for all inline US customers. During this time, inbound emails sent to customers may not have been ingested or processed. The Abnormal engineering team identified and resolved the root cause, and service was confirmed recovering as of 21:22 UTC. Emails affected during the incident window have been reprocessed. If you experience any further issues, please reach out to our support team at support@abnormalsecurity.com.

Inline – Email Ingestion Disruption (US)

Jun <var data-var='date'> 2</var>, <var data-var='time'>11:43</var> PDT Resolved - Starting at 17:45 UTC on June 2, 2026, Abnormal experienced a service disruption affecting email detection and remediation for Inbound Email Security customers in the EU region. Additionally, between 18:00 UTC and 19:00 UTC, US customers experienced degraded AI Security Mailbox functionality. As of 19:20 UTC, all services have been restored and live traffic is processing normally across both regions. Abnormal is continuing to work through retry queues to reprocess any emails from the impacted window. If you experience any further issues, please reach out to our support team at support@abnormalsecurity.com. Jun <var data-var='date'> 2</var>, <var data-var='time'>11:26</var> PDT Monitoring - Starting at 17:45 UTC on June 2, 2026, Abnormal experienced a service disruption affecting email detection and remediation for Inbound Email Security customers in the EU region. Additionally, between 18:00 UTC and 19:00 UTC, US customers experienced degraded attack detection and AI Security Mailbox functionality. Abnormal is now beginning to see recovery across impacted services. The engineering team continues to monitor as systems restore to full operational capacity. Any emails from the impacted window will be reprocessed. A further update will be provided once full recovery is confirmed. Jun <var data-var='date'> 2</var>, <var data-var='time'>11:08</var> PDT Investigating - Starting at 17:45 UTC on June 2, 2026, Abnormal began experiencing a service disruption affecting email scoring, detection, and remediation for Inbound Email Security in the EU region. EU customers may experience emails not being analyzed or remediated during this time. The engineering team is actively investigating and working to restore full functionality. The next update will be provided within 1 hour or sooner as more information becomes available.

Inbound Email Security Detection and Remediation Disruption

May <var data-var='date'>30</var>, <var data-var='time'>09:14</var> PDT Resolved - Microsoft services have fully recovered from the degraded M365 sign-in audit log delivery, and Abnormal services have also recovered as of 09:41 UTC on May 30, 2026. Abnormal engineering has initiated a reprocess to ensure all Account Takeover detections from the impacted time window are properly processed. No sign-in data was lost during this event. If you experience any further issues, please reach out to Abnormal support at support@abnormalsecurity.com. May <var data-var='date'>29</var>, <var data-var='time'>15:43</var> PDT Update - Microsoft has confirmed the root cause of the degraded M365 sign-in audit log delivery has been fixed and services are currently recovering. Microsoft estimates full recovery within approximately 7 hours. Once Microsoft services complete recovery, Abnormal expects Account Takeover detection to begin processing normally and will work through the backlog of sign-in events from this incident. No data has been lost. Abnormal will post a final resolved update once Microsoft confirms full restoration and backlog processing is complete. May <var data-var='date'>29</var>, <var data-var='time'>15:23</var> PDT Identified - Microsoft has confirmed that the degraded delivery of M365 sign-in audit logs was caused by a power event in their West US 2 datacenter, which began at 04:27 UTC on May 29, 2026. Microsoft has reported that their service is on a recovery path and is currently processing the accumulated backlog, including sign-in stream data. As a result, customers using Account Takeover detection with Microsoft M365 may continue to experience delays in the creation of detection cases based on sign-in activity until the backlog is fully consumed. No sign-in data has been lost, and Abnormal has adjusted processing to account for the delay and ensure no detections are missed. All other Account Takeover data sources continue to operate at full capacity. Abnormal will continue to monitor and provide a further update once Microsoft confirms full recovery. If you have any questions, please reach out to Abnormal support at support@abnormalsecurity.com. May <var data-var='date'>29</var>, <var data-var='time'>08:31</var> PDT Update - We are continuing to investigate this issue. May <var data-var='date'>29</var>, <var data-var='time'>08:25</var> PDT Investigating - Starting at 04:27 UTC on May 29, 2026, Microsoft is experiencing degraded delivery of M365 sign-in audit logs due to an issue on Microsoft's infrastructure. As a result, customers using Account Takeover detection with Microsoft M365 may see a delay of up to 90 minutes in the creation of detection cases based on sign-in activity. No sign-in data is being lost, and Abnormal has adjusted processing to account for the delay and ensure no detections are missed. All other Account Takeover data sources continue to operate at full capacity. Abnormal is actively monitoring the situation and will provide updates as it evolves. If you have any questions, please reach out to Abnormal support at support@abnormalsecurity.com.

Account Takeover – Delayed Sign-In Event Processing (Microsoft M365 Customers)

May <var data-var='date'>18</var>, <var data-var='time'>16:24</var> PDT Resolved - Starting at 22:00 UTC on May 18, 2026, Abnormal identified an increase in legitimate emails being incorrectly flagged as malicious and remediated, impacting Inbound Email Security and AI Security Mailbox. The engineering team identified and disabled the rule responsible for falsely flagging these emails at 01:03 UTC on May 19, 2026. Messages affected during the impact window will be reprocessed.

Emails Incorrectly Remediated – Inbound Email Security and AI Security Mailbox

May <var data-var='date'>14</var>, <var data-var='time'>18:07</var> PDT Resolved - Between 00:19 UTC and 00:49 UTC, Abnormal experienced message remediation delays affecting Inbound Email Security for US customers. During this approximately 30-minute window, email remediation was temporarily delayed due to a backend database issue. The engineering team stopped the contributing process and remediation services recovered. All messages from the impacted window have since been reprocessed. If you experience any further issues, please reach out to our support team at support@abnormalsecurity.com

Inbound Email Security Email Remediation Delays – US

May <var data-var='date'> 4</var>, <var data-var='time'>11:58</var> PDT Resolved - Between approximately May 2, 2026, and May 4, 2026 at 18:45 UTC, Abnormal experienced a service disruption affecting Security Orchestration, Automation and Response (SOAR) API functionality, Portal data retrieval, and Threat Log display for US customers. During this time, customers utilizing SOAR API integrations may have experienced errors when attempting to query messages, attachments, and threat data. The Abnormal engineering team has deployed a fix and confirmed that SOAR API is functioning as expected. All affected services have been restored to normal operation. If you experience any further issues, please reach out to the Abnormal support team at support@abnormalsecurity.com. May <var data-var='date'> 4</var>, <var data-var='time'>10:21</var> PDT Investigating - Abnormal is currently investigating an issue affecting Security Orchestration, Automation and Response (SOAR) API functionality for US customers. Customers utilizing SOAR API integrations may experience errors when attempting to query messages, attachments, and threat data. Some Portal functionality that relies on the same data source may also be intermittently affected. The Abnormal engineering team is actively investigating the root cause and working toward resolution. Email detection and remediation services remain fully operational and are not affected by this incident.

Degraded SOAR API functionality for US customers

Apr <var data-var='date'>28</var>, <var data-var='time'>00:09</var> PDT Resolved - Between 00:30 UTC and 08:10 UTC on April 28, 2026, Abnormal experienced an issue impacting email detection and scoring accuracy, which may have resulted in some legitimate emails being incorrectly flagged. Abnormal engineering identified the root cause, implemented a fix, and confirmed that all email detection and scoring services have been fully restored. All messages received during the impact window will be replayed to ensure complete email protection coverage. If you experience any further issues, please reach out to the support team at support@abnormalsecurity.com. Apr <var data-var='date'>27</var>, <var data-var='time'>23:20</var> PDT Update - Abnormal engineering has identified the root cause and is working to implement a fix to fully restore email protection. Abnormal will provide an additional update within 1 hour or as new information becomes available. Apr <var data-var='date'>27</var>, <var data-var='time'>22:25</var> PDT Identified - Starting at 00:30 UTC on April 28, 2026, Abnormal identified an issue impacting email detection accuracy, which may result in some legitimate emails being incorrectly flagged. Abnormal engineering is actively investigating and implementing corrective measures to restore full detection accuracy. Email remediation services remain operational. Abnormal will provide an update within 1 hour or as new information becomes available.

Email Detection Service Degradation

Apr <var data-var='date'> 9</var>, <var data-var='time'>10:05</var> PDT Resolved - Starting at approximately 19:00 UTC on April 8, 2026, Abnormal received reports of customers being unable to access the Customer Support Portal. Some customers experienced intermittent or complete inaccessibility when attempting to log in or navigate the Portal. The Abnormal engineering team identified and resolved the underlying cause. As of 16:40 UTC on April 9, 2026, Customer Support Portal access has been fully restored and customers are able to successfully log in. Apr <var data-var='date'> 9</var>, <var data-var='time'>08:15</var> PDT Investigating - Starting at approximately 19:00 UTC on April 8, 2026, Abnormal began receiving reports of customers being unable to access the Customer Support Portal. Some customers may experience intermittent or complete inaccessibility when attempting to log in or navigate the Customer Support Portal. The Abnormal engineering team is actively investigating the underlying cause of the issue.

Customer Support Portal Access Disruption

Apr <var data-var='date'> 8</var>, <var data-var='time'>17:24</var> PDT Resolved - Starting at 13:30 UTC on April 8, 2026, Abnormal experienced an issue with the email-based support case submission process due to a vendor-caused outage. Customers who submitted support requests by emailing support@abnormalsecurity.com or support@abnormal.ai may have experienced failures when attempting to create new cases. The vendor has confirmed that service has been restored, and Abnormal has verified that emails are now flowing as expected. Customers may resume submitting support requests via email. Apr <var data-var='date'> 8</var>, <var data-var='time'>13:15</var> PDT Identified - Starting at 13:30 UTC on April 8, 2026, Abnormal began experiencing an issue with receipt of email-based support case submissions and replies due to a vendor caused issue. Customer emails to support@abnormalsecurity.com or support@abnormal.ai may be delayed. Abnormal support is actively monitoring the issue and will provide further updates once additional information is received from the vendor. In the meantime, customers are encouraged to submit support inquiries through the Abnormal Customer Support Portal at https://abnormalsecurity.my.site.com/support/s/.

Support Case Submission via Email Temporarily Unavailable

Apr <var data-var='date'> 8</var>, <var data-var='time'>08:56</var> PDT Resolved - Between 09:53 UTC on April 4, 2026 and 17:38 UTC on April 6, 2026, Abnormal experienced an issue within the Gov Portal affecting the AI Security Mailbox Analyzed tab and remediation information cards on the message details page. During this time, Gov customers may have experienced failures when loading the AI Security Mailbox Analyzed tab, and remediation details may have appeared incomplete or failed to display on the message details page. The Abnormal engineering team identified and resolved the underlying issue, and full functionality has been restored. If you experience any further issues, please reach out to the support team at support@abnormalsecurity.com.

AI Security Mailbox and Portal Display Issues

Mar <var data-var='date'>26</var>, <var data-var='time'>17:14</var> PDT Resolved - Between approximately 16:00 UTC and 23:50 UTC on March 26, 2026, Abnormal experienced a service disruption impacting AI Security Mailbox report processing for US and EU customers. During this time, new reports submitted to AI Security Mailbox may not have been processed as expected. Abnormal engineers deployed a fix at 23:50 UTC and confirmed that services are now processing in real time. Any reports submitted during the impacted window are currently being reprocessed and are expected to be fully completed within the next few hours. If you experience any further issues, please reach out to the Abnormal support team at support@abnormalsecurity.com. Mar <var data-var='date'>26</var>, <var data-var='time'>16:03</var> PDT Identified - Starting at approximately 16:00 UTC on March 26, 2026, Abnormal began experiencing an issue with AI Security Mailbox report processing. US and EU customers may experience failures in the processing of new reports submitted to AI Security Mailbox. Abnormal engineering is actively investigating and working to restore full functionality.

AI Security Mailbox Report Processing Disruption

Mar <var data-var='date'>16</var>, <var data-var='time'>17:00</var> PDT Resolved - Starting around 22:23 UTC on March 16, 2026, Abnormal experienced a service disruption impacting Inbound Email Security detection and remediation for some US customers. During this time, inline email processing was also affected, and some emails may not have been properly detected or remediated. Abnormal's engineering team actively worked to address the issue, and all services were fully restored as of 23:56 UTC. Detection and remediation are now operating as expected for US customers. If you experience any further issues, please reach out to Abnormal's support team at support@abnormalsecurity.com. Mar <var data-var='date'>16</var>, <var data-var='time'>16:21</var> PDT Investigating - Starting around 22:23 UTC on March 16, 2026, Abnormal began experiencing a service disruption impacting Inbound Email Security detection and remediation for some US customers. Additionally, inline email processing is affected during this time, and malicious emails may not be properly detected or remediated. Abnormal's engineering team is actively investigating and working to restore full functionality. The next update will be provided within 1 hour or when further information is obtained.

Inbound Email Security Detection and Remediation Disruption — US

Mar <var data-var='date'>16</var>, <var data-var='time'>08:05</var> PDT Resolved - Starting around 14:40 UTC, Abnormal experienced an issue with the EU Portal being inaccessible and displaying an error to EU customers. Email detection and remediation services were not impacted during this time and continued to operate normally. Access to the Abnormal Portal for EU customers has been restored as of 15:01 UTC. If you experience any further issues, please reach out to the Abnormal support team at support@abnormalsecurity.com. Mar <var data-var='date'>16</var>, <var data-var='time'>07:58</var> PDT Investigating - Starting around 14:26 UTC, Abnormal began experiencing an issue with the EU Portal being inaccessible and displaying an error. EU customers may be unable to access the Abnormal Portal during this time. Email detection and remediation services remain fully operational and are not impacted. The engineering team is actively working to restore access to the EU Portal.

Abnormal Portal Access Disruption – (EU)

Mar <var data-var='date'>12</var>, <var data-var='time'>13:56</var> PDT Resolved - Between 18:00 UTC and 20:40 UTC on March 12, 2026, Abnormal identified an issue where messages flagged as attack, spam, or borderline experienced delays in appearing within the Threat Log for Gov customers. Inbound Email Security detection and remediation remained fully functional throughout the incident, and all threats continued to be identified and acted upon as expected. Abnormal engineers redeployed the affected services and confirmed recovery as of 20:40 UTC. All messages during the incident window were queued and have been processed. If you experience any further issues, please reach out to Abnormal support at support@abnormalsecurity.com. Mar <var data-var='date'>12</var>, <var data-var='time'>13:31</var> PDT Identified - Starting at 18:00 UTC on March 12, 2026, Abnormal identified an issue where messages flagged as attack, spam, or borderline may experience delays in appearing within the Threat Log for Gov customers. Inbound Email Security detection and remediation remain fully functional, and all threats continue to be identified and acted upon as expected. The impact is limited to a delay in Threat Log visibility within the Portal.

Threat Log Display Delays – Gov

Feb <var data-var='date'>23</var>, <var data-var='time'>19:38</var> PST Resolved - Between February 23, 2026 at 19:55 UTC and February 24, 2026 at 03:30 UTC, Abnormal experienced an issue impacting Threat Log visibility for GovCloud customers. During this time, newly detected threats did not appear in the Threat Log, and the Email Details page displayed "content unavailable" for previously flagged messages. Inbound email processing, threat detection, and remediation were not impacted throughout the duration of this incident. Abnormal engineers have confirmed that Threat Log services are now processing in real time and full visibility has been restored. If you have any questions or concerns, please contact support at support@abnormalsecurity.com. Feb <var data-var='date'>23</var>, <var data-var='time'>19:23</var> PST Investigating - Starting February 23, 2026 at 19:55 UTC, Abnormal identified an issue impacting Threat Log visibility for GovCloud customers. During this time, newly detected threats may not appear in the Threat Log, and the Email Details page may display "content unavailable" for previously flagged messages. Inbound email processing, threat detection, and remediation remain fully operational and are not affected by this issue. The Abnormal engineering team is actively investigating and working to restore full Threat Log visibility.

Threat Log Visibility Disruption for Fedramp Customers

Feb <var data-var='date'>12</var>, <var data-var='time'>07:04</var> PST Resolved - Between 14:28 UTC and 15:00 UTC on February 12, Abnormal experienced issues with customers being able to access the Abnormal Portal. During this time, customers may have experienced the inability to log into the Portal. Service has been fully restored as of 15:00 UTC for customers in US and EU regions. If you experience any further issues, please reach out to support@abnormalsecurity.com. Feb <var data-var='date'>12</var>, <var data-var='time'>06:57</var> PST Monitoring - Starting at 14:28 UTC on February 12, Abnormal began experiencing issues with customers being able to access the Abnormal Portal. Customers may experience inability to log into the Portal and navigate pages. Abnormal is starting to see early recovery in the Portal in the US.  We continue to actively work to restore functionality.

Portal Access Issues

Feb <var data-var='date'>11</var>, <var data-var='time'>17:32</var> PST Resolved - Between 16:22 UTC on February 11 and 01:17 UTC on February 12, government customers may have experienced Account Takeover messages not being properly flagged for security threats. Abnormal's engineering team has resolved the issue and service is confirmed as fully functional. If customers experience any further issues, please reach out to support@abnormalsecurity.com Feb <var data-var='date'>11</var>, <var data-var='time'>16:56</var> PST Investigating - Starting at 16:22 UTC on February 11, Abnormal began experiencing an issue with Account Takeover detection. Government customers may experience Account Takeover messages not being properly flagged for security threats. Abnormal is actively investigating and working to resolve this issue.

Account Takeover Detection Issue

Feb <var data-var='date'>11</var>, <var data-var='time'>12:26</var> PST Resolved - Between 19:28 UTC and 20:15 UTC, Abnormal experienced service degradation with the Portal. US customers might have experienced issues logging in and navigating the Abnormal Portal during this time. EU customers were not impacted. Abnormal mitigated the root cause and services have been confirmed as fully restored. If you experience any further issues please reach out to support@abnormalsecurity.com Feb <var data-var='date'>11</var>, <var data-var='time'>11:56</var> PST Monitoring - Starting at 19:28 UTC, Abnormal began experiencing service degradation with the Portal. Customers might experience issues logging in and navigating the Abnormal Portal during this time. We are starting to see early signs of recovery and are working to ensure full service restoration.

Abnormal Portal Degradation

Feb <var data-var='date'>10</var>, <var data-var='time'>08:07</var> PST Resolved - Between 00:56 UTC and 16:00 UTC on February 10, 2026, Abnormal experienced a service disruption affecting email threat detection, AI Security Mailbox, and graymail processing for Government customers. During this time, some malicious and spam emails may not have been properly flagged or processed. Abnormal engineers restored service as of 16:00 UTC for email threat detection, AI Security Mailbox, and graymail processing for Government customers. If customers experience any further issues please reach out to support@abnormalsecurity.com for further assistance. Feb <var data-var='date'>10</var>, <var data-var='time'>07:30</var> PST Update - We are continuing to monitor for any further issues. Feb <var data-var='date'>10</var>, <var data-var='time'>07:21</var> PST Monitoring - Starting at 00:56 UTC on February 10, 2026, Abnormal began experiencing a service disruption affecting email threat detection, AI Security Mailbox, and graymail processing for government customers. During this time, malicious and spam emails may not be properly flagged or processed. Engineers are beginning to see early recovery. Abnormal engineers will continue to monitor for full service restoration.

Email Threat Detection and Graymail Processing Disruption for Government Customers

Jan <var data-var='date'>23</var>, <var data-var='time'>09:54</var> PST Resolved - As of 03:30 UTC on January 23, Abnormal's Inbound Email Security services have fully recovered from the processing delays due to the widespread Microsoft outage. Microsoft has confirmed that they have fully resolved the infrastructure issue that was impacting multiple services globally. All email processing has returned to normal performance levels. If you experience any further issues or need assistance, please reach out to Abnormal's support team at support@abnormalsecurity.com. Jan <var data-var='date'>22</var>, <var data-var='time'>21:57</var> PST Update - Microsoft has reported high confidence that the incident affecting Abnormal's Inbound Email Security service is largely resolved. Microsoft has confirmed that access to Microsoft Defender for Office, Microsoft Purview, and DNS functionality has been restored, and Exchange Online mail flow remains stable. Abnormal engineers will continue to monitor service health overnight. The next update will be be provided around 16:00 UTC. Jan <var data-var='date'>22</var>, <var data-var='time'>18:26</var> PST Monitoring - Abnormal is beginning to see early signs of recovery. The full recovery remains dependent on Microsoft completing their infrastructure restoration efforts. Our engineers continue to monitor the ongoing Microsoft issue impacting email processing. The next update will be provided when service is fully restored, or when Microsoft shares further information. Jan <var data-var='date'>22</var>, <var data-var='time'>16:43</var> PST Update - Microsoft has reported that during their ongoing recovery efforts for the outage that began affecting Abnormal's email services, they introduced a configuration change intended to expedite recovery. However, this change has temporarily created additional processing delays for some customers. The next update will be provided when Microsoft provides further information, or when services start to recover. Jan <var data-var='date'>22</var>, <var data-var='time'>13:45</var> PST Update - Microsoft has reported that while they have restored their affected infrastructure to a healthy state, additional load balancing is required to mitigate persistent impact from the earlier outage that began at 19:00 UTC. Microsoft has identified and is implementing additional actions to direct requests and traffic to additional healthy sections of infrastructure to achieve sustained recovery. Abnormal continues to monitor the situation closely and customers may still experience delays in email processing as Microsoft completes their recovery efforts. Jan <var data-var='date'>22</var>, <var data-var='time'>12:32</var> PST Identified - Starting at 19:00 UTC, Abnormal began experiencing an issue processing emails for Inbound Email Security for US customers due to a widespread Microsoft outage. Abnormal engineers are working with Microsoft to restore email security. The next update will be provided in 60 minutes or when further information is available. For more information on this outage, please see Microsoft's Status Page: https://status.cloud.microsoft/m365/referrer=serviceStatusRedirect

Email Processing Delays Due to Microsoft Outage - US

Jan <var data-var='date'>21</var>, <var data-var='time'>10:44</var> PST Resolved - As of 18:33 UTC, Abnormal has fully restored all impacted services. Portal performance has returned to normal levels, and customers can now successfully access threat logs and retrieve threat data through Security Orchestration, Automation and Response integrations without errors. All delayed threat log data has been processed and is now available in customer portals. If customers continue to experience any issues, please contact support at support@abnormalsecurity.com. Jan <var data-var='date'>21</var>, <var data-var='time'>09:52</var> PST Investigating - Starting at 17:05 UTC, Abnormal began experiencing an issue affecting the display and access of threat log information, as well as slowness in the Abnormal Portal for US customers. Customers may encounter errors when viewing threat logs in the Abnormal portal or accessing threat data through Security Orchestration, Automation and Response integrations. Abnormal's threat detection and email protection services continue to operate normally, and customer security remains intact. The engineering team is actively working to restore full functionality, and the next update will be provided within 60 minutes or when more information becomes available.

Portal Performance and Threat Log Access Issues - US

Jan <var data-var='date'>15</var>, <var data-var='time'>16:05</var> PST Resolved - As of 23:40 UTC on January 16, 2026, the Account Takeover event issue affecting FedRAMP customers has been fully resolved. All Account Takeover services are now operating normally. Abnormal's core email protection services remained fully operational throughout this incident and continued to protect against threats. If customers have any questions or concerns, please contact support at support@abnormalsecurity.com. Jan <var data-var='date'>15</var>, <var data-var='time'>15:37</var> PST Monitoring - Abnormal engineers have restored Account Takeover service for FedRAMP customers and are beginning to see events processing normally. Engineers continue to work towards full service restoration and are monitoring the system closely. The next update will be provided when further information becomes available. Jan <var data-var='date'>15</var>, <var data-var='time'>13:40</var> PST Update - Abnormal engineers continue to work to fully restore Account Takeover functionality for FedRAMP customers. The next update will be provided when further information becomes available. Jan <var data-var='date'>15</var>, <var data-var='time'>12:39</var> PST Identified - Starting at 20:00 UTC on January 13, Abnormal began experiencing an issue affecting Account Takeover event visibility for Fedramp customers. Abnormal's core email protection services remain fully operational and continue to protect against threats. Abnormal's engineering team is actively working to restore full Account Takeover functionality.

Account Takeover Service Degradation - Fedramp

Jan <var data-var='date'>15</var>, <var data-var='time'>09:11</var> PST Resolved - Between 16:40 UTC and 17:00 UTC, Abnormal experienced a service degradation with the Abnormal Portal affecting Fedramp customers. During this time, Fedramp users experienced errors when trying to load and navigate the portal, along with delays with pages loading. Remediation and detection services remained fully operational throughout the incident window.

Is Abnormal Security down?

Abnormal Security status is UP

Lastest published events

Inbound Email Security, AI Security Mailbox, and Portal Disruption – US and EU Tenant Customers

Inbound Email Security Message Remediation Delays – (GOV)

Inline – Email Ingestion Disruption (US)

Abnormal Security Services, Components and Regions

Recent Abnormal Security events

Inbound Email Security, AI Security Mailbox, and Portal Disruption – US and EU Tenant Customers

Inbound Email Security Message Remediation Delays – (GOV)

Inline – Email Ingestion Disruption (US)

Inbound Email Security Detection and Remediation Disruption

Account Takeover – Delayed Sign-In Event Processing (Microsoft M365 Customers)

Emails Incorrectly Remediated – Inbound Email Security and AI Security Mailbox

Get your FREE account now,
5 monitors included!

Is Abnormal Security down?

Abnormal Security status is UP

Lastest published events

Inbound Email Security, AI Security Mailbox, and Portal Disruption – US and EU Tenant Customers

Inbound Email Security Message Remediation Delays – (GOV)

Inline – Email Ingestion Disruption (US)

Abnormal Security Services, Components and Regions

Recent Abnormal Security events

Inbound Email Security, AI Security Mailbox, and Portal Disruption – US and EU Tenant Customers

Inbound Email Security Message Remediation Delays – (GOV)

Inline – Email Ingestion Disruption (US)

Inbound Email Security Detection and Remediation Disruption

Account Takeover – Delayed Sign-In Event Processing (Microsoft M365 Customers)

Emails Incorrectly Remediated – Inbound Email Security and AI Security Mailbox

Get your FREE account now,5 monitors included!

Get your FREE account now,
5 monitors included!