I reached out to Microsoft myself asking about a possible reason to why this technical problem happened in the first place, as well as why it took the team so long to fix it. However, among the more than 10 million people subscribed to this encrypted email service, the majority uses the domain-all of which were affected. It's worth mentioning that other Tuta's email domains such as, tuta.io,, and were not falsely spammed.