Microsoft is retiring endpoint-sensitive data alerting in the Microsoft Defender portal by March 23, 2026. Organizations must switch to Microsoft Purview DLP for alerting, enforcement, and investigation of sensitive data activities on endpoints. Existing Defender alert policies will stop generating alerts after this date.
Applies to: Microsoft Defender XDR · Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).