Share via

Critical Security Incident: Unsolicited Files in OneDrive – Reporting Fails

D Lewis 0 Reputation points
2026-02-05T11:10:57.3233333+00:00

Since December 2025, my OneDrive account has been receiving multiple unsolicited PDF files from unknown sources. I have not opened these files.
Attempts to report these files using the OneDrive reporting tool consistently return “error, try again later,” making it impossible to flag or remove the content through normal channels.
This appears to be a serious security and safety issue affecting OneDrive. I request urgent investigation, removal of these files, verification that my account has not been compromised, and steps to prevent future incidents.
I am also escalating this issue via secure@microsoft.com and request a reference or incident number documenting this case.

Microsoft 365 and Office | OneDrive | Other | Android
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Noel Macadangdang 16,820 Reputation points Independent Advisor
    2026-02-06T15:54:42.7666667+00:00

    Hi,

    Thank you for sharing your question. I understand how concerning and disruptive this is, especially when you’re trying to keep your files and account safe.

    It’s completely reasonable to request an urgent investigation, removal, verification that your account is secure, and a documented incident reference.

    This behavior can coincide with spam‑share campaigns that surface items in your OneDrive “Shared” view and with intermittent issues in the reporting workflow. When the OneDrive “Report a concern” action fails, please submit the report through Microsoft’s anonymous Digital Safety form and the OneDrive “Report a concern” support path, which routes cases to the moderation team even if you can’t flag from the file menu directly. You can also use the Microsoft Service Status site to report a OneDrive service problem and check current incidents, which helps correlate your case with known issues. For verification and an official incident or reference number, contact Microsoft Support and request a case to review your account activity and remove malicious shares; consumer OneDrive users can open a support ticket via the Contact Us page, and business users should have an administrator open a case in the Microsoft 365 admin center, both of which provide a tracking number once created.

     

    I hope this helps.

     

    Best Regards,

    Noel

     

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-02-05T11:11:09.74+00:00

    If you are receiving unsolicited files in your OneDrive account, it is important to take steps to address the situation. Here are some actions you can consider:

    1. Do Not Open the Files: Since you have not opened the unsolicited PDF files, this is a good practice to avoid potential malware or security risks.
    2. Report the Files: If the OneDrive reporting tool is returning errors, you may want to try reporting the files through other channels. You can also consider using Microsoft Defender for Office 365 to report suspicious emails or files. This can help in flagging the issue to Microsoft.
    3. Check Account Security: Ensure that your account is secure. You can check for any unauthorized access or changes to your account settings. It may be beneficial to change your password and enable two-factor authentication if you haven't already.
    4. Contact Microsoft Support: Since you are experiencing issues with reporting the files, contacting Microsoft Support directly may provide you with more immediate assistance. They can help verify if your account has been compromised and assist in removing the unwanted files.
    5. Prevent Future Incidents: Regularly review your account settings and security measures. Familiarize yourself with the reporting tools available in Microsoft 365 and OneDrive to ensure you can act quickly if similar incidents occur in the future.
    6. Escalate the Issue: As you mentioned escalating the issue via secure@microsoft.com, ensure you keep a record of your communications for reference.

    While it is concerning to receive unsolicited files, following these steps can help mitigate risks and address the situation effectively.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.