Microsoft Teams: Breakout rooms now supported in meetings with up to 1,000 attendees

🚨 The Signal: Microsoft Teams breakout rooms now support up to 1,000 attendees, up from 300. This expands collaboration in large meetings, but increases the potential attack surface for information disclosure if not properly managed.

The Impact

Meeting organizers and participants are affected, with a low security risk of unintended information sharing in larger breakout sessions.

• Meeting Organizers: Risk of misconfiguring large meetings, leading to unintended information exposure.
• Meeting Participants: Potential for joining breakout rooms with inappropriate access to sensitive discussions.
• Security Teams: Need to ensure existing Teams meeting policies adequately cover larger group interactions.

The Action

1. Review existing Microsoft Teams meeting policies for breakout room settings: Microsoft Teams admin center > Meetings > Meeting policies.
2. Verify 'Who can bypass the lobby?' and 'Who can present?' settings are appropriate for large meetings with breakout rooms.
3. Communicate best practices for managing sensitive information in large Teams meetings with breakout rooms to organizers.
4. Update internal training materials to reflect the increased capacity and associated security considerations for breakout rooms.

Domain: Teams · Impact: low · Workload: Teams