Copilot data breach

Question

Copilot data breach

RyanPietila-2556 0

Copilot published my private info in the discovery section!!

0 comments

2 answers

Your answer

Answer 1

Thomas4-N 21,535 Microsoft External Staff Moderator

Hello RyanPietila-2556,

I understand why this would be concerning. Before assuming this was a data breach, could you clarify exactly what you mean by the Discovery section and where you saw the information?

If possible, please share a screenshot showing what appeared there, but redact your name, email address, or any other private information before posting it publicly.

Also, was the information visible only while you were signed in to your own Microsoft account, or could you see it from another account or while signed out?

Those details should help determine whether this was personalized content shown only to you or information that was actually exposed to others.

Thomas4-N 21,535 Reputation points Microsoft External Staff Moderator

2026-09-11T11:29:34.34+00:00

Hello RyanPietila-2556,

Just check in to see how things are going. Let me know if you need anything.

Answer 2

For Copilot on Windows, browsing history is saved on the device, and depending on settings, that browsing history can be sent to Microsoft for diagnostics and product improvement. The available self-service control in the provided guidance is to manage optional diagnostic data in the app:

Open Profile > Settings > Browsing settings > Web data and security > Privacy.
Turn Send optional diagnostic data to improve Microsoft products on or off.
Restart Copilot for Windows for the change to take effect.

For Microsoft Copilot activity history more broadly, users can delete their Copilot activity history through the My Account portal. That history includes prompts and Copilot responses.

For organizational Microsoft Copilot experiences, admins can review stored interaction data by using Content search or Microsoft Purview, and can set retention policies for chat interaction data.