--- title: "M365 Oversharing Remediation: DETOX Results at Les Assises 2026" description: "Abeille Assurances and Louis Dreyfus Company share DETOX results on Microsoft 365: oversharing remediation, risky access closed, TBs deleted." image: https://blog.idecsi.com/hubfs/Atelier%20LA26%20Abeille%2c%20LDC%20et%20IDECSI.jpeg --- [![Logo-Idecsi-Black-tagline](https://blog.idecsi.com/hs-fs/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-Black-tagline.png?width=1010&height=319&name=Logo-Idecsi-Black-tagline.png)](https://www.idecsi.com/) - Solutions DETOX® pour M365 Audit, Remediation & ROI [Discover DETOX](https://info.idecsi.com/detox-m365?hsLang=en) ![Audit, Remediation & ROI](https://blog.idecsi.com/hubfs/ILLU-4.png) Solutions IDECSI gives security and IT teams full control over their data — across DSPM, Data Access Governance, Human Risk Management, and Data Volume Management. - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) M365 Data Security Platform](https://www.idecsi.com/solution/mydatasecurity/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Data storage optimization](https://www.idecsi.com/solution/mydatamanagement/) - Challenges M365 Checklist 15 Warning Signs Your M365 Data Is at Risk [Get the checklist](https://info.idecsi.com/checklist-15-warningsigns?hsLang=en) ![Checklist risques M365](https://blog.idecsi.com/hubfs/Frame-2147255341.png) Your 2026 Challenges Address your most critical data security and governance challenges - across your M365 environment - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility accross M365](https://www.idecsi.com/challenges/visibility-microsoft-365) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Get Ready For Copilot M365](https://www.idecsi.com/challenges/m365-copilot/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Control external user access](https://www.idecsi.com/challenges/external-access-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Prevent Sensitive Data Exposure](https://www.idecsi.com/challenges/sensitive-data-m365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility across Microsoft 365](https://www.idecsi.com/challenges/visibility-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ensure regulatory compliance](https://www.idecsi.com/challenges/compliance-m365/) - Resources Is Your Tenant Ready for Copilot? A Security & Governance Playbook [Download](https://info.idecsi.com/whitepapper_copilot?hsLang=en) ![Copilot guide](https://blog.idecsi.com/hubfs/Frame-2147255339.png) Our resources Check out our useful resources for improving data protection - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Blog](https://blog.idecsi.com) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Help Center](https://help.idecsi.com/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ressources & News](https://blog.idecsi.com/resources?hsLang=en) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) About us](https://www.idecsi.com/about-us/) - [Customers](https://blog.idecsi.com/resources-customer?hsLang=en) - - [English](https://blog.idecsi.com/m365-oversharing-remediation-detox-results-2026) - [Français](https://blog.idecsi.com/fr/retex-assises-2026-detox-m365) Search [Request a demo](https://info.idecsi.com/demo-idecsi?hsLang=en) 13 October 2026 # Microsoft 365 Oversharing Remediation: DETOX Results from Abeille Assurances and LDC ![conference detox results clients IDECSI](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Atelier%20LA26%20Abeille%2c%20LDC%20et%20IDECSI.jpeg) - [Home](https://www.idecsi.com/) - [Blog](https://blog.idecsi.com) - Microsoft 365 Oversharing Remediation: DETOX Results from Abeille Assurances and LDC On October 8, at the 26th edition of the Assises de la Cybersécurité (France's leading cybersecurity conference), two IDECSI customers presented the results of their [DETOX program](https://info.idecsi.com/detox-m365?hsLang=en) on Microsoft 365. Guillaume Perrin, Head of Microsoft Solutions at Abeille Assurances, and Frédéric Kerkor, Modern Workplace Architect at Louis Dreyfus Company, started from similar findings: sharing that keeps multiplying, access rights no one controls anymore, and storage that keeps growing. Their results converge. In a few weeks, data owners themselves corrected tens of thousands of risky access rights and freed up several terabytes, with no operational remediation burden on IT. Here is what CISOs and CIOs should take away from this session: ## Two Companies, Two Microsoft 365 Tenants Under Pressure ### Abeille Assurances: Collaboration Usage Has Intensified Part of Aéma Groupe, Abeille Assurances has been a major insurer in France since 1856. The company serves 3.1 million customers and posted €8.5 billion in consolidated revenue in 2025. It has about 4,000 employees and a network of 1,000 general agents. Its IT department has about 500 internal staff. The DSSI sets the security framework, and the DSN owns the technical foundation. Microsoft 365 usage has grown significantly since 2021, driven by business teams around SharePoint and Teams. At the same time, a CSR initiative encourages employees to share links rather than attachments. The result: links in every department, versions piling up, and visibility into access that has become insufficient. ### Louis Dreyfus Company: A Fast-Growing Global Environment Louis-Dreyfus Company (LDC) runs a single, global Microsoft 365 tenant. It includes 15,118 users, 754 TB of data (215 TB of it on SharePoint), and 21,000 SharePoint sites. The company deployed Microsoft's native classification solution, Microsoft Purview (15 label levels), to manage its sensitive data. SharePoint storage grew from about 104 TB to more than 214 TB in two years. Several factors explain this increase: the spread of Teams and SharePoint, meeting recordings and transcripts, multiplying versions, mergers and acquisitions, and the arrival of generative AI. For LDC, the goals were fairly simple: [get visibility into sharing risks](https://www.idecsi.com/challenges/visibility-microsoft-365/), make correction possible, and above all hand control back to the people who actually know the data, the business teams. At this scale, a central team cannot arbitrate everything. Before DETOX, permission reviews were manual, occasional, and tedious. ## The Stakes: Microsoft 365 Oversharing, Copilot, and Storage Growth ### An Exposure Surface No One Could See in Full At Abeille Assurances, the initial audit found about 6,400 findings across the tenant. Eight out of ten came from more than 100,000 sharing links; the rest came from inherited or forgotten permissions. Documents therefore remained accessible well beyond their original circle. At LDC, the scale was different: about one million "company links," including more than 14,000 anonymous shares and more than 61,000 shares open to external users. Nearly half of the classified files were shared outside the company. The team believed anonymous sharing was blocked, yet it was still being created. ### Copilot Makes Every Excessive Share Exploitable For LDC, the trigger was the arrival of Microsoft Copilot. *"When Copilot arrived, we ran an internal 48-hour challenge. Several of us accessed confidential documents, committee minutes, and personal data. Nobody had hacked anything: it was all simply shared."* This real-world test launched the O365 Data Protection program. An assistant that constantly queries all accessible content changes the nature of the risk: the quality and safety of its answers depend on how clean the document estate is. ### Storage Volume Weighs on Costs Both companies also faced storage growth. Abeille Assurances wanted to stay within the capacity included in its licenses (1 TB plus 10 GB per assigned license) and delay buying extra space. LDC saw its storage saturated by recordings, transcripts, AI-generated content, and uncontrolled versions. [Learn more on how IDECSI can help cut M365 storage costs and eliminate data sprawl](https://www.idecsi.com/solution-data-volume-management/) ### A Workload IT Cannot Carry Alone The last challenge, shared by both organizations: IT knows neither the usage nor the business value of the data. It cannot decide alone what should be shared, kept, or deleted. Abeille Assurances had set five objectives before launch: 1. Control storage volume; 2. Understand the tenant's real exposure; 3. Limit the administration workload, without controlling what users do; 4. Spread Microsoft 365 best practices; 5. Contribute to the CSR initiative, notably by controlling version management. ## The DETOX Method: Data Owners at the Center of Oversharing Remediation DETOX relies on two time-limited campaigns that give data owners, not IT, the job of correcting risks. The process is largely automated and delivered as SaaS with SSO authentication, with no agent to deploy. It covers SharePoint, Teams, Microsoft 365 groups, OneDrive, and Exchange Online. It relies on two complementary modules of a single platform: - **MyDataSecurity** for security and exposure: review of sharing links, permissions, and access rights, plus integration of Purview sensitivity labels; - **MyDataManagement** for storage and data hygiene: management of versions, inactive files, ownerless sites, and oversized files. ### Four Steps, from Audit to Quantified ROI 1. **Discovery and check-up (3 to 10 days):** Metadata collection and automatic identification of risks, sensitive data, and sensitive users. 2. **Owner-led remediation campaign (1 to 4 weeks).** Each employee receives a personalized email and gets a dashboard showing their own access rights and shares. They revoke access themselves in a few clicks, with no training or technical expertise. 3. **Bulk remediation of the remainder.** Whatever the business teams did not handle is corrected through grouped actions, run by IDECSI's teams. 4. **Measuring the gains:** A before/after assessment of risks eliminated, volumes freed, and the contribution of data owners. ### Why These Two Companies Chose DETOX Abeille Assurances wanted to address security and digital sobriety with a single platform. Its criteria: reporting by owner without a technical project, fast implementation, wider control points than native tools, and no operational remediation burden on IT. The team saw an approach that makes users accountable, rather than yet another admin console. LDC, for its part, compared three options: - Building an in-house tool meant building, running, and maintaining it. - Standard Microsoft tools provided visibility but left most of the remediation to IT. - LDC chose **IDECSI for the combination of a platform, a method, and support:** project management, campaign coordination, and analysis expertise. ## Abeille Assurances: Six Weeks to Close 6 Out of 10 Findings The IT team discovered DETOX by IDECSI in July 2024. *"The longest part was launching the topic internally. Once the project was approved and jointly backed by IT, the CISO, and CSR, four months were enough to execute it, addressing security and digital sobriety with the same approach."* **Nearly one in two contacted employees took part.** Across a scope of 4,841 users, 4,445 employees had at least one item to review. Nearly 46% opened their MyDataSecurity dashboard, and 14.6% of owners went all the way to correction. **96% of opened emails led to an action.** *"In six weeks, six out of ten findings were closed. Everything was decided and corrected by employees: no ticket, no script, no action from IT teams."* Guillaume Perrin, Abeille Assurances. The financial target set for storage volume was reached. All corrections were decided and carried out by data owners: no ticket, no script, no action from IT teams. **What made the difference, and what changes for campaign 2** Four factors drove the campaign: joint sponsorship from IT, the CISO, and CSR; communication co-built with internal communications (personalized emails, intranet, screens); user accountability; and remediation run without IT intervention, with IT effort focused on scoping and steering. But business as usual goes on: new shares appear every day, and 2,747 findings remain to be handled. For the second campaign, Abeille Assurances plans to target non-participants earlier, anticipate retention rules that block some corrections, plan bulk remediation for the sensitive remainder, and integrate the indicators into CISO and CSR dashboards. The goal: move from a successful campaign to a lasting capability. ## Louis Dreyfus Company: 26% Fewer Risky Access Rights and 103 TB Deleted LDC ran two successive campaigns over six months, one on data security, the other on storage volume. **Campaign 1: MyDataSecurity, reducing exposure** Run from May 27 to June 29, 2026, the first campaign covered 15,118 users, of whom 9,718 had at least one item to review. More than 40% of the affected users accessed their MyDataSecurity interface, and more than half of them (52%) acted by removing at least one risk. Beyond the numbers, the campaign produced a map of sites and their owners, and made it possible to remove public external shares, the first source of potential leaks. **Campaign 2: MyDataManagement, reducing storage volume** The second campaign ran for 40 days, between July and September 2026, with six reminder emails. Employees deleted 75 TB, mainly by cleaning up versions and unnecessary files. In parallel, a bulk remediation automatically cleaned up old versions: beyond 50 versions, on files not modified for six months. It freed another 28 TB. In total, 103 TB were deleted, about 14% of the tenant, including **25 TB freed on SharePoint.** **LDC's lessons** The model works: 88% of the users who opened their interface took action without contacting LDC's support. Data owners are essential to reviewing shares and access rights, because the business knows how to sort its data. For the next campaigns, LDC is making two adjustments. Email does the groundwork, but Teams broadens the audience. The calendar must also account for the company's key moments. The team is considering more regular campaigns, since shares get recreated: *"Our challenge now is to make detox a rhythm, with regular campaigns, themed or targeted at specific populations, notably in connection with data labeling."* Frédéric Kerkor Frédéric Kerkor finally stressed one point: do not underestimate the investment in communication. For LDC, IDECSI's support was a key factor in structuring the campaign, mobilizing users, and turning analysis into concrete results. ## What CISOs and CIOs Can Take Away Both experience reports reach the same conclusion: when business teams are given visibility and the means to act, they correct things themselves. Five lessons emerge. ![2 lessons learned from detox results](https://blog.idecsi.com/hs-fs/hubfs/image-png-Oct-13-2026-12-04-12-1145-PM.png?width=600&height=338&name=image-png-Oct-13-2026-12-04-12-1145-PM.png) 1. **The owner decides, IT steers.** IT provides visibility and frames the campaign; the business teams, who know the usage and value of their data, make the correction decisions. 2. **Participation is built.** Personalized emails, executive sponsorship, paced reminders, and internal key moments drive adoption. Without participation, no remediation. 3. **A short campaign produces measurable results.** Six weeks at Abeille Assurances, 40 days on the storage side at LDC, with a quantified before/after assessment. 4. **Bulk remediation complements user action.** It handles the remainder and technical rules, such as version cleanup, without tying up IT. 5. **Data hygiene becomes a rhythm.** Shares are recreated every day. Both companies are already preparing their next campaign to build a lasting capability. With the rollout of Copilot, this discipline is no longer optional: every excessive share becomes information that AI can surface. ### Assess Your Microsoft 365 Tenant's Exposure [Preparing a Copilot deployment](https://www.idecsi.com/challenges/m365-copilot/), or want to take stock of the risks to your data or your storage? IDECSI's teams can walk you through the DETOX approach and the indicators it produces on your own tenant. [Discover the DETOX approach](https://info.idecsi.com/fr/detox-donnees-partagees-m365?hsLang=fr) · [Talk to an IDECSI expert](https://info.idecsi.com/demo-idecsi?hsLang=en) ## FAQ What is Microsoft 365 oversharing remediation? Microsoft 365 oversharing remediation is the work of identifying and correcting sharing links, permissions, and inherited rights that expose files beyond their intended audience. In the DETOX method, data owners fix their own risky access during a time-limited campaign, while IT provides visibility and steers the campaign. How do you run a Microsoft 365 oversharing remediation campaign? DETOX follows four steps: discovery and check-up (3 to 10 days), a remediation campaign led by data owners (1 to 4 weeks), bulk remediation of what remains, and a before/after measurement of the gains. Each employee gets a personalized email and a dashboard where they can revoke access in a few clicks. What's the difference between a security campaign and a storage campaign in Microsoft 365? A security campaign targets exposure: sharing links, permissions, access rights, and sensitivity labels. A storage campaign targets data hygiene: versions, inactive files, ownerless sites, and oversized files. LDC ran one of each, and the storage campaign deleted 103 TB. Do sensitivity labels alone prevent oversharing in Microsoft 365? ### No. LDC had deployed Microsoft Purview with 15 label levels, yet nearly half of its classified files were shared outside the company, and anonymous sharing it believed blocked was still being created.   What's the best way to reduce oversharing before deploying Microsoft 365 Copilot? Clean up shares before Copilot goes live, because an assistant that queries all accessible content turns every excessive share into exposed information. LDC's internal 48-hour Copilot challenge surfaced confidential documents with no hacking involved. A short, owner-led campaign gave both companies measurable results within weeks.   Recent articles [Microsoft Scout and M365 Security: Access Risks to Anticipate](https://blog.idecsi.com/microsoft-scout-security-data-access-m365?hsLang=en) [Sensitive Data in Microsoft 365: How to Identify Risks and Regain Control](https://blog.idecsi.com/fr/sensitive-data-microsoft-365?hsLang=en) [Microsoft 365 SharePoint Storage Costs in 2026: What's Changing](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) Best practices to improve Microsoft Teams security [![Download the infographic ](https://no-cache.hubspot.com/cta/default/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f) Share this article Subscribe to our newsletter and receive new contents every month ### Data protection, let's discuss your project?   [![Contact us](https://no-cache.hubspot.com/cta/default/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe) ![video background](https://idecsi2a-dev-idecsi.pf27.wpserveur.net/wp-content/uploads/2022/02/video-background-idecsi-responsive-1.png) [![Logo-Idecsi-White-Ss-ES](https://blog.idecsi.com/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-White-Ss-ES.svg)](https://www.idecsi.com/) +33 1 84 79 38 30 - - - - [Why choose IDECSI?](https://www.idecsi.com/user-security/) - [About us](https://www.idecsi.com/about-us/) - [Join the team](https://www.welcometothejungle.com/fr/companies/idecsi) - Solutions - [Visibility](https://www.idecsi.com/challenge-data-visibility/) - [Detection](https://www.idecsi.com/challenge-threat-detection/) - [User engagement](https://www.idecsi.com/challenge-involve-user/) - [Access review](https://www.idecsi.com/challenge-rights-review/) - [Remediation](https://www.idecsi.com/challenge-remediation/) - [Sensitive data](https://www.idecsi.com/challenge-sensitive-data/) - [Products](https://www.idecsi.com/solution/) - [MyDataSecurity](https://www.idecsi.com/solution/mydatasecurity/) - [Advanced Monitoring](https://www.idecsi.com/solution/advanced-monitoring/) - [MyDataManagement](https://www.idecsi.com/solution/mydatamanagement/) - Resources - [Resources & News](https://blog.idecsi.com/resources?hsLang=en) - [Blog](https://blog.idecsi.com) - [Customer success](https://blog.idecsi.com/resources-customer?hsLang=en) - [Extranet](https://extranet.idecsi.com?hsLang=en) © IDECSI ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mona Piquet", "url" : "https://blog.idecsi.com/author/mona-piquet" }, "dateModified" : "2026-10-13T12:18:11.424Z", "datePublished" : "2026-10-13T12:04:56.000Z", "headline" : "M365 Oversharing Remediation: DETOX Results at Les Assises 2026", "image" : [ "https://blog.idecsi.com/hubfs/Atelier%20LA26%20Abeille%2c%20LDC%20et%20IDECSI.jpeg" ], "mainEntityOfPage" : { "@id" : "https://blog.idecsi.com/m365-oversharing-remediation-detox-results-2026", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.idecsi.com/hubfs/Logo-Idecsi-Black-tagline.png" }, "name" : "IDECSI" } } ``` ```json { "@context" : "https://schema.org", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Microsoft 365 oversharing remediation is the work of identifying and correcting sharing links, permissions, and inherited rights that expose files beyond their intended audience. In the DETOX method, data owners fix their own risky access during a time-limited campaign, while IT provides visibility and steers the campaign." }, "name" : "What is Microsoft 365 oversharing remediation?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "DETOX follows four steps: discovery and check-up (3 to 10 days), a remediation campaign led by data owners (1 to 4 weeks), bulk remediation of what remains, and a before/after measurement of the gains. Each employee gets a personalized email and a dashboard where they can revoke access in a few clicks." }, "name" : "How do you run a Microsoft 365 oversharing remediation campaign?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "A security campaign targets exposure: sharing links, permissions, access rights, and sensitivity labels. A storage campaign targets data hygiene: versions, inactive files, ownerless sites, and oversized files. LDC ran one of each, and the storage campaign deleted 103 TB." }, "name" : "What's the difference between a security campaign and a storage campaign in Microsoft 365?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "No. LDC had deployed Microsoft Purview with 15 label levels, yet nearly half of its classified files were shared outside the company, and anonymous sharing it believed blocked was still being created." }, "name" : "Do sensitivity labels alone prevent oversharing in Microsoft 365?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Clean up shares before Copilot goes live, because an assistant that queries all accessible content turns every excessive share into exposed information. LDC's internal 48-hour Copilot challenge surfaced confidential documents with no hacking involved. A short, owner-led campaign gave both companies measurable results within weeks." }, "name" : "What's the best way to reduce oversharing before deploying Microsoft 365 Copilot?" } ] } ```