Microsoft has confirmed that a bug in its Office suite allowed Copilot AI to surface private email content from users’ Exchange Online accounts, even when data loss prevention policies were in place.