Sharepoint Home showing incorrect activity info

%3CLINGO-SUB%20id%3D%22lingo-sub-54402%22%20slang%3D%22en-US%22%3ESharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54402%22%20slang%3D%22en-US%22%3E%3CP%3EI%20never%20noticed%20before%2C%20but%20one%20of%20my%20users%20recently%20pointed%20out%20the%20activity%20info%20on%20Sharepoint%20home%20was%20incorrect.%20I%20was%20suprised%20to%20see%20she%20was%20right.%20Sites%20I%20have%20never%20opened%20show%20me%20having%20opened%20certain%20files.%20Sites%20I%20have%20opened%20show%20me%20having%20read%2Fopened%20files%20I%20have%20not%20opened.%26nbsp%3BIt%20even%20shows%20sites%20in%20my%20frequest%20list%20which%26nbsp%3BI%20do%20not%20remember%20ever%20opening.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20'modified'%20entries%20seem%20to%20be%20reliable%20but%20the%20'read'%20entries%20are%20not.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anybody%20else%20experienced%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F12033iD48D192D5852D46C%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20alt%3D%22CaptureSpHome.PNG%22%20title%3D%22CaptureSpHome.PNG%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EExample%20of%20false%20entry%3C%2FSPAN%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-54402%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-570568%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-570568%22%20slang%3D%22en-US%22%3ESome%20of%20our%20users%20are%20reporting%20this%20same%20issue%2C%20and%20for%20example%20one%20of%20the%20users%20has%20a%20bunch%20of%20sites%20and%20files%20listed%20under%20the%20%E2%80%99frequent%20sites%E2%80%99%20which%20she%20has%20not%20explicitly%20visited%2Fviewed%20and%20the%20time%20stamp%20for%20all%20is%2023%20hours%20ago.%20I%20mean%20it%20shows%20%E2%80%9Dyou%20viewed%20filename.xxx%2023%20hours%20ago%E2%80%9D%20for%20all%20the%20files.%20Obviously%20this%20is%20very%20confusing%20for%20the%20users%20if%20they%20have%20not%20opened%20the%20files.%20What%20can%20cause%20this%2C%20did%20you%20get%20any%20response%20to%20your%20MS%20support%20case%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-278370%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278370%22%20slang%3D%22en-US%22%3E%3CP%3EI%20found%20that%20everything%20that%20creates%20a%20thumbnail%20of%20the%20document%20will%20cause%20it%20to%20be%20logged%20as%20previewed.%20This%20includes%20SharePoint%20web%20app%20and%20ALL%20Microsoft%20phone%20apps.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-277888%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-277888%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20having%20this%20issue%20as%20well%20and%20I%20feel%20like%20I'm%20losing%20my%20mind.%20Has%20there%20been%20any%20resolution%20to%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267298%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267298%22%20slang%3D%22en-US%22%3E%3CP%3EFollowing%20as%20I%20am%20experiencing%20this%20too...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-206465%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-206465%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20experiencing%20the%20exact%20same%20issue.%20Any%20updates%2Fresults%20so%20far%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-55002%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-55002%22%20slang%3D%22en-US%22%3E%3CP%3EI%20will%20open%20a%26nbsp%3Bsupport%20ticket.%20Just%20wanted%20to%20know%20first%20if%20it%20was%20just%20us.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-54721%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54721%22%20slang%3D%22en-US%22%3E%3CP%3EAdding%20some%20folks%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10366%22%20target%3D%22_blank%22%3E%40Dave%20Cohen%20(US)%3C%2FA%3E%2C%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33124%22%20target%3D%22_blank%22%3E%40Vidya%20Srinivasan%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10709%22%20target%3D%22_blank%22%3E%40Mijanou%20Bishoff%3C%2FA%3E%26nbsp%3Bplease%20open%20a%20support%20ticket%20for%20this%2C%20since%20we'll%20need%20to%20get%20your%20logs%20to%20dig%20into%20this%20issue%20-%20not%20one%20that%20we%20can%20troubleshoot%20over%20the%20forum.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-54420%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54420%22%20slang%3D%22en-US%22%3E%3CP%3EThat's%20very%20strange%20-%20I%20haven't%20seen%20that%20before.%20I%20would%20suggest%20that%20you%20submit%20a%20service%20incident%20with%20Microsoft%20to%20have%20support%20begin%20investigating.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-54409%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54409%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F96%22%20target%3D%22_blank%22%3E%40Mark%20Kashman%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F5937%22%20target%3D%22_blank%22%3E%40Sean%20Squires%3C%2FA%3E%26nbsp%3BFYI%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707129%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707129%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10709%22%20target%3D%22_blank%22%3E%40Mijanou%20Bishoff%3C%2FA%3E%26nbsp%3B-%20I%20just%20noticed%20this%20in%20the%20SP%20mobile%20app%20this%20morning.%20It's%20showing%20I%20somehow%20accessed%20a%20bunch%20of%20files%20back%20in%202015%20-%20I've%20only%20been%20at%20this%20company%20for%203%20months%20and%20I've%20never%20heard%20of%20the%20sites%20or%20files.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1603068%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1603068%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20fix%20for%20this%20yet%3F%20we%20are%20experiencing%20it%20also%20it%20has%20caused%20a%20few%20issues%20as%20some%20personal%20information%20is%20showing%20as%20viewed%20but%20hasn't%20been.%3CBR%20%2F%3EWe%20have%20since%20moved%20anything%20sensitive%20to%20folders%20with%20special%20permissions%20but%20it%20has%20sown%20a%20seed%20of%20doubt%20in%20with%20the%20company%20that%20sensitive%20information%20isn't%20protected.%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1617472%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1617472%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20also%20seeing%20this%20strange%20behavior.%20Looking%20at%26nbsp%3Bsharepoint%20online%20details%20pane%20activity%20shows%20people%20editing%20documents%20who%20have%20never%20even%20seen%20them.%20I%20suspect%20this%20is%20caused%20by%20onedrive%20sync%20or%20other%20aps%20but%20would%20like%20an%20explination.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1713547%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1713547%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364146%22%20target%3D%22_blank%22%3E%40wpaulg%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20noticed%20the%20same%20thing%20this%20morning.%20I%20am%20not%20syncing%20the%20sites%20so%20I%20don't%20think%20it%20could%20be%20OneDrive%20causing%20the%20problem.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20changed%20my%20password%20concerned%20that%20I%20might%20have%20been%20hacked%20but%20all%20the%20signins%20in%20the%20past%20month%20have%20been%20from%20my%20ip%20address.%20Plus%2C%20it%20would%20be%20difficult%20for%20someone%20else%20to%20have%20both%20my%20password%20and%20phone%20for%20MFA.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20will%20create%20a%20ticket%20and%20report%20back%20if%20they%20have%20an%20answer.%20If%20anyone%20else%20gets%20an%20answer%20please%20report%20back%20as%20well.%20It%20would%20be%20better%20not%20to%20show%20the%20activity%20at%20all%20than%20to%20have%20it%20sometimes%20right%20and%20sometimes%20wrong.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1755178%22%20slang%3D%22en-US%22%3ERe%3A%20Sharepoint%20Home%20showing%20incorrect%20activity%20info%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1755178%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F4770%22%20target%3D%22_blank%22%3E%40John%20Twohig%3C%2FA%3E%26nbsp%3Bif%20you%20hear%20back%20please%20update!%20I%20work%20for%20a%20company%20that%20handles%20controlled%20information.%20We%20have%20dual%20verification%20set%20up%20but%20this%20glitch%20makes%20people%20uneasy.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

I never noticed before, but one of my users recently pointed out the activity info on Sharepoint home was incorrect. I was suprised to see she was right. Sites I have never opened show me having opened certain files. Sites I have opened show me having read/opened files I have not opened. It even shows sites in my frequest list which I do not remember ever opening.

 

The 'modified' entries seem to be reliable but the 'read' entries are not.

 

Has anybody else experienced this?

 

Example of false entryExample of false entry 

18 Replies

That's very strange - I haven't seen that before. I would suggest that you submit a service incident with Microsoft to have support begin investigating.

Adding some folks @Dave Cohen (US), @Vidya Srinivasan.

@Mijanou Bishoff please open a support ticket for this, since we'll need to get your logs to dig into this issue - not one that we can troubleshoot over the forum.

 

I will open a support ticket. Just wanted to know first if it was just us.

I'm experiencing the exact same issue. Any updates/results so far?

Following as I am experiencing this too...

I'm having this issue as well and I feel like I'm losing my mind. Has there been any resolution to this?

I found that everything that creates a thumbnail of the document will cause it to be logged as previewed. This includes SharePoint web app and ALL Microsoft phone apps.

Some of our users are reporting this same issue, and for example one of the users has a bunch of sites and files listed under the ’frequent sites’ which she has not explicitly visited/viewed and the time stamp for all is 23 hours ago. I mean it shows ”you viewed filename.xxx 23 hours ago” for all the files. Obviously this is very confusing for the users if they have not opened the files. What can cause this, did you get any response to your MS support case?

Hi @Mijanou Bishoff - I just noticed this in the SP mobile app this morning. It's showing I somehow accessed a bunch of files back in 2015 - I've only been at this company for 3 months and I've never heard of the sites or files.

Is there any fix for this yet? we are experiencing it also it has caused a few issues as some personal information is showing as viewed but hasn't been.
We have since moved anything sensitive to folders with special permissions but it has sown a seed of doubt in with the company that sensitive information isn't protected.     

 

 

I am also seeing this strange behavior. Looking at sharepoint online details pane activity shows people editing documents who have never even seen them. I suspect this is caused by onedrive sync or other aps but would like an explination.

@wpaulg 

 

I just noticed the same thing this morning. I am not syncing the sites so I don't think it could be OneDrive causing the problem. 

 

I changed my password concerned that I might have been hacked but all the signins in the past month have been from my ip address. Plus, it would be difficult for someone else to have both my password and phone for MFA.

 

I will create a ticket and report back if they have an answer. If anyone else gets an answer please report back as well. It would be better not to show the activity at all than to have it sometimes right and sometimes wrong. 

@John Twohig if you hear back please update! I work for a company that handles controlled information. We have dual verification set up but this glitch makes people uneasy.  

@tsmith2326 

 

They are still working on it. Microsoft thinks it is Backupify, which we use to backup our SharePoint sites, but I don't see how that can be the case. Backupify says it isn't them so they will probably be going back and forth for a while.

 

I think we have established that the changes are coming from a Microsoft ip address which apparently would happen if whatever is changing things is using an API. So it is possible that whatever is doing it could be something at MS or some third party app. I am not aware of any third party app we are using other than Backupify but maybe something was set up years ago that I don't know about. Maybe it is an old Flow or Power BI report doing it. 

 

I expect we will eventually get to the bottom of it but some things can be hard to troubleshoot.

 

 

Any explenation for this behaviour?
Got this issue still. Do not use any backup software or OneDrive sync on these sites.

@Katso4040 

 

I never did get an answer. Microsoft was convinced it is Backupify but it is pretty clear that it isn't. Since I am the only one at our company that noticed I stopped pushing for an answer.

@John Twohig 

 

Alright, thank you for taking your time to answer.  To bad that MS can figure it out, doesn't raise the users confidence in the platform.