User impact: Admins’ Microsoft Defender for Endpoint telemetry and alerts may be delayed in the Microsoft 365 Defender portal.

Title: Admins’ Microsoft Defender for Endpoint telemetry and alerts may be delayed in the Microsoft 365 Defender portal

User impact: Admins’ Microsoft Defender for Endpoint telemetry and alerts may have been delayed in the Microsoft 365 Defender portal.

Final status: Our review of recent service updates determined that a recent service deployment aimed at improving a portion of Defender flow functionality wasn’t providing the intended effect and was subsequently determined to be superfluous, which thereby caused impact, so we’ve rolled back to the previous working version and confirmed that service has been restored.
 
Scope of impact: This issue could have potentially affected any admin who may have received Microsoft Defender for endpoint telemetry and alerts in the Microsoft 365 Defender portal.

Start time: Tuesday, April 4, 2023, at 11:00 AM UTC

End time: Tuesday, April 4, 2023, at 8:00 PM UTC

Root cause: A recent service deployment aimed at improving a portion of Defender flow functionality wasn’t providing the intended effect and was subsequently determined to be superfluous, which thereby caused impact.

Next steps:
– We’re reviewing our recent service deployment procedures and processes to prevent similar impact like this one from happening in the future.

This is the final update for the event.