A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
Good day Felix,
Just to gently clarify before we go any further, this is a user‑to‑user support forum. I don’t have the ability to access or investigate individual accounts because this is a user‑to‑user support forum.
Currently, I checked the Microsoft 365 Service Health dashboard and there are no reported incidents that match this behavior.
Note: This page is accessible only to users with admin permissions.
Since this issue affects multiple users, impacts version history and appears to occur at the service level, I recommend that your organization's IT administrator open a support case with Microsoft through Microsoft 365 admin center > Support > Help & Support.
To reach a support engineer more quickly, disable Support Assistant, enter "Support" as the keyword, and select Contact Support.
In the ticket description, please clearly describe the issue. The admin can also attach screenshots or screen recordings.
Additionally, sharing their preferred contact times may help the support team handle the case more efficiently.
I also recommend reviewing Microsoft Purview Audit logs for the affected SharePoint site and files. Use a time range that starts before the latest versions were last confirmed and extends beyond the time when the files returned to normal.
Please review the following audit events by entering them in the Activities - operation names:
FileModified,FileDeleted,FileRecycled,FileRestored,FileMoved,FileCheckOutDiscarded,FileVersionRecycled,FileVersionsAllRecycled,FileVersionBulkDeletionStarted,TenantApplyFileVersionPolicyStarted
Note: The admin can include additional activities if desired.
Select the search results once the search has completed, then export the audit results and retain the AuditData field, as it contains additional details about the operation, including the account or process that performed the action.
This information is often critical when determining whether the behavior originated from a user action, a policy, an automated process or a service-side event.
Additional information is available in the following resources:
Search the audit log | Microsoft Learn
Audit log activities | Microsoft Learn
Detailed activity properties in the audit log | Microsoft Learn
Note: If you're an end-user or you don't have sufficient administrative permissions, please contact your Global administrator for assistance. In case you do not know who is your IT admin, kindly refer to this article: How do I find my Microsoft 365 admin? - Microsoft Support
I hope this information is helpful. If you have any questions or need further support, please don’t hesitate to reach out at any time.
Thank you for your patience and understanding.
If the answer is helpful, please click "Yes" and kindly upvote it. If you have any extra questions about this answer, please click "Comment".
Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.