For the past few minutes, I've been repeatedly receiving Microsoft 365 Defender threat analytics report emails—34 messages in about two minutes. Is anyone else seeing the same notification burst? It appeared to stop shortly after I posted this, but I'm wondering whether it might return.
3 Answers
Yes, we saw the same thing here—a sudden flood of notifications that seemed to stop on its own.
We received about 34 reports as well. It stopped shortly afterward for us too.
Before assuming it’s just a service-side notification burst, verify that the messages are genuine. Check the sender details and whether SPF, DKIM, and DMARC passed. If the flood starts again, temporarily disabling the specific report subscription may be the quickest way to quiet it while investigating.

Same here. It stopped almost immediately, though I’m keeping an eye on it in case another wave comes through.