Exposed users for mail in the o365 securlet increased sharply after Dec 5th.
CASB 3.165 changed exposed users count to include external senders of inbound email even when no content was detected. Exposed user count will no longer include these users after the 3.167 release to avoid confusion. EU (Feb 27, 2024) US (Feb 29, 2024).
Customers can request through support that exposed users should include the external senders of received email.
Exposed users will continue to count outbound email destined for external recipients.
The exposed user count is cumulative and can be reset by contacting support.