Russell Labs Computing Knowledgebase : Microsoft Outlook app security issue on mobile devices

Microsoft recently released an Outlook app for iOS and Android that is essentially a rebranded app from a company called Accompli, which Microsoft bought a couple of months ago.

We have just learned of significant security issues with the iOS/Android Outlook app. The application stores each user’s NetID and password in a cloud service. The UW-Madison has neither a contract with, nor a security assessment from, that service.

Due to these issues, DoIT will begin blocking the Outlook app from accessing the campus Office 365 service beginning Monday, February ­­9, at noon.

The block will prevent syncing for approximately 170 Office 365 users. DoIT will notify these users of the block and tell them to change their NetID password.

The native mail applications on iOS and Android are still safe for use.  If you did not install the Microsoft Outlook app from the an App Store then you are not affected by this problem. 

If you did install this app (and it appears that not many people on campus did), the resolution is to-

1) Remove the Exchange account and data from the device

2) Delete the Outlook app from your device 

3) Change your NetID password - https://kb.wisc.edu/search.php?q=change+your+netid+password

If you have questions or comments, please see this document or contact help@russell.wisc.edu or help@doit.wisc.edu.