Midjourney

1. 01Midjourney trains on customer data. Block the app or move users to a business tier that excludes training.
2. 021 signup email show people creating Midjourney accounts with their work address. Those accounts live outside Entra, so leaving the company does not close them. Move users to the enterprise tier with SSO, or add a mail flow rule that flags vendor signups to the security team.
3. 031 billing email mean someone is paying for Midjourney personally and expensing or absorbing it. Consolidate onto a company license where data terms are negotiated.
4. 04Midjourney appears only in email, not in Entra, on the network, or on managed devices, so it is probably used from personal devices or phones. Conditional Access and endpoint controls will not reach it; policy and coaching will.

Metadata only: sender, recipient, subject, and time from Defender for Office 365. No mailbox content is read.

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. vendor_email · Sep 6, 2026
   2 vendor emails from midjourney.com to 1 person in 30 days: 1 signup, 0 login, 1 billing
   Detail

   {
     "byKind": {
       "login": 0,
       "other": 0,
       "signup": 1,
       "billing": 1
     },
     "subjects": [
       "Welcome to Midjourney: confirm your email",
       "Your Midjourney subscription invoice"
     ],
     "senderDomains": [
       {
         "count": 2,
         "domain": "midjourney.com"
       }
     ]
   }

2. mail_signup · Sep 5, 2026
   Signup: 'Welcome to Midjourney: confirm your email' to [email protected]
   Detail

   {
     "sender": "[email protected]",
     "messageId": "mail-0015"
   }

3. mail_billing · Sep 6, 2026
   Billing: 'Your Midjourney subscription invoice' to [email protected]
   Detail

   {
     "sender": "[email protected]",
     "messageId": "mail-0016"
   }