{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/microsoft-llmail-inject-2025/",
 "asOf": "2026-09-26",
 "id": "microsoft-llmail-inject-2025",
 "date": "2025-06-11",
 "datePrecision": "day",
 "title": "LLMail-Inject releases data from an adaptive prompt injection challenge against an email agent",
 "lane": "defense",
 "kind": "dataset",
 "summary": "Microsoft researchers and collaborators report on LLMail-Inject, a public challenge in which participants tried to inject instructions into emails to trigger unauthorized tool calls by an LLM email assistant protected by various defenses. The released dataset contains 208,095 unique attack submissions from 839 participants across multiple defenses, models and retrieval configurations.",
 "whyItMatters": "It provides a large public corpus of adaptive, human-crafted injections for testing defenses.",
 "actors": [
  "microsoft"
 ],
 "topics": [
  "prompt-injection",
  "data-exfiltration"
 ],
 "atlas": [
  "untrusted-content",
  "tools"
 ],
 "artifacts": [
  "llmail-inject",
  "spotlighting"
 ],
 "sources": [
  {
   "url": "https://arxiv.org/abs/2506.09956",
   "publisher": "arXiv",
   "title": "LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge",
   "date": "2025-06-11",
   "type": "primary",
   "accessed": "2026-09-25"
  },
  {
   "url": "https://www.microsoft.com/en-us/msrc/blog/2025/07/how-microsoft-defends-against-indirect-prompt-injection-attacks",
   "publisher": "Microsoft Security Response Center",
   "title": "How Microsoft defends against indirect prompt injection attacks",
   "date": "2025-07-29",
   "type": "primary",
   "accessed": "2026-09-25",
   "shared": true
  }
 ],
 "keyFacts": [
  {
   "fact": "208,095 unique attack submissions from 839 participants.",
   "locator": "Abstract"
  },
  {
   "fact": "Microsoft's MSRC post describes the open dataset as over 370,000 prompts from 800+ participants (a different count than the paper's unique submissions).",
   "locator": "MSRC post, research section"
  }
 ],
 "significance": 3,
 "fideQuestions": [],
 "methods": [
  "adaptive-red-teaming",
  "indirect-prompt-injection"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}