False MS 365 Quarantine Email Release Requests

[colly72]

We've started receiving MS email quarantine release requests, that have clearly not been requested by the user. Indeed, some of the user accounts that they originate from, are disabled. It started around a week ago and they seem to come in bursts. I'm reasonably confident that the accounts are not compromised but I'm at a loss to see what might be causing it.

 

Has anyone else had this? I've seen a recent thread on Reddit from someone else who has the exact same problem:

 

Edited September 24, 2024 by colly72