If the file has Microsoft Sensitivity Labels, Apache POI cannot decrypt it, as this requires Microsoft's Information Protection SDK.
You can download the java wrapper and try: https://www.microsoft.com/en-us/download/details.aspx?id=106361