SHD / MC Checker

[serviceRestored] DZ528883 | Microsoft 365 Defender | Users’ web threat protection reports in Microsoft Defender for Endpoint may be stale



DZ528883 | Microsoft 365 Defender | Users’ web threat protection reports in Microsoft Defender for Endpoint may be stale

Status serviceRestored
Classification advisory
User Impact Users’ web threat protection reports in Microsoft Defender for Endpoint may be stale.
Last Updated 03/18/2023 00:27:05
Start Time 03/11/2023 07:00:00
End Time 03/17/2023 20:00:00
Latest Message Title: Users’ web threat protection reports in Microsoft Defender for Endpoint may be stale

User impact: Users’ web threat protection reports in Microsoft Defender for Endpoint may have been stale.

Final status: Through our reporting pipeline analysis, we’ve identified that a misconfiguration introduced in a recent service deployment caused a data flow issue, resulting in impact. We’ve reverted the problematic update to restore the working configuration and confirmed through internal telemetry that impact has been remediated.

Scope of impact: Any user attempting to view up-to-date web threat protection reporting data within Microsoft Defender for Endpoint may have been impacted.

Start time: Saturday, March 11, 2023, at 7:00 AM UTC

End time: Friday, March 17, 2023, at 8:00 PM UTC

Root cause: A misconfiguration introduced in a recent service deployment caused a data flow issue, resulting in impact.

Next steps:
– We’re reviewing our service update testing and validation processes to better identify similar problems affecting web threat protection report data prior to deployment.

This is the final update for the event.