Early Friday, a global IT outage caused by an issue with cybersecurity firm CrowdStrike disrupted flights, banks, retailers, stock exchanges, 911 call centers, and media outlets. Experts say this could be one of the largest IT outages in modern history.
In what is being described as the most serious IT outage the world has ever seen, a massive technical fault caused widespread disruptions across the globe today. Planes and trains were grounded, the NHS experienced significant disruptions, shops closed their doors, football teams couldn’t sell tickets, and banks and TV channels were knocked offline.
Global Impact and Emergency Response
In response to the devastating outage, officials convened an emergency COBRA meeting. The fault led to the sudden shutdown of Windows computers, causing departure boards at major airports like Heathrow, Gatwick, and Edinburgh to go dark on what was already the busiest day for British airports since the Covid pandemic.
Disruptions Across Sectors
NHS England advised patients not to attend GP appointments unless otherwise informed, as the system used to schedule appointments was affected. Train passengers were warned to expect delays due to “widespread IT issues across the entire network.”
Over a thousand flights were cancelled globally. Passengers at Los Angeles International Airport were seen sleeping in passageways, while massive queues formed at terminals across Spain. In Delhi, staff resorted to using a makeshift whiteboard to record departures.
Retail and Emergency Services Affected
In Australia, shops either shut down or went cashless as digital checkouts stopped working. In the US, emergency service lines went down in states including Alaska, Arizona, Indiana, Minnesota, New Hampshire, and Ohio.
Source of the Outage
Cybersecurity company CrowdStrike acknowledged responsibility for the error, which impacted Microsoft 365 apps and operating systems. They stated that the issue was caused by a “defect found in a single content update” and emphasized that it was not a security incident or cyberattack.
Given Windows is the most widely used operating system globally, the outage disrupted nearly every sector of the economy, with supermarkets and cafes, including Morrisons, Waitrose, B&Q, and the bakery chain Gail’s, unable to process card payments.
Comparisons to Y2K
Technology experts likened the scale of disruption to the anticipated chaos from Y2K, a computer programming shortcut that was expected to cause significant problems as the year changed from 1999 to 2000 but ultimately did not materialize.
Widespread Disruptions
Prominent security consultant Troy Hunt declared on social media, “I don’t think it’s too early to call it: this will be the largest IT outage in history. This is basically what we were all worried about with Y2K, except it’s actually happened this time.”
TV channels like Sky News and CBBC went off air, and football clubs such as Manchester United and Blackburn Rovers delayed the release of match tickets. School communication apps like Schoolcomms also reported issues.
Immediate Consequences
NHS services across the UK were hit hard, with GP booking systems going down. Airports saw huge queues, with Ryanair flights grounded and train services disrupted. Users worldwide encountered the “blue screen of death” on their computers.
In the US, American Airlines and Delta grounded all flights as 911 and hospital systems went down. In Australia, Qantas issued stunning announcements to passengers as the global crash wreaked havoc on travel plans. Office workers joked about ending the week early due to the shutdown of their systems.
Scenes from Around the World
- Edinburgh: Huge queues formed outside Edinburgh Airport departures amid the chaos.
- London (Victoria Station): Warned of “widespread IT issues across the entire network.”
- Amsterdam (Schiphol Airport): Passengers stared at signs displaying departure information.
- Dubai: Passengers waited at check-in counters for Indian carrier IndiGo.
- Spain: Long lines formed at Barajas Airport on an extremely busy day for global aviation.
- Los Angeles (LAX): Travellers slept in passageways after flights were cancelled.
- Brisbane: Supermarkets displayed the “blue screen of death” after the outage.
Responses and Investigations
CrowdStrike issued a statement acknowledging the fault and deploying a fix. They reiterated that it was not a security incident and directed customers to their support portal for updates.
Dr. Mark Gregory, an associate professor at RMIT University’s School of Engineering, suggested that an update to CrowdStrike’s Falcon software might be “bricking” Windows computers, rendering them inoperable.
Broader Implications
Hospitals like Salisbury District Hospital reported delays. The London Stock Exchange experienced a global technical issue preventing news publication. Bristol Water reported company-wide IT issues, though their billing department remained operational. The Port of Dover experienced longer queues but resumed normal operations later.
Microsoft 365 continued investigating the issue impacting users’ ability to access apps and services, with assurances of ongoing improvements and mitigation efforts.
Government and Public Reactions
The UK government was urged to convene a COBRA emergency committee meeting to address the issue. Liberal Democrat Cabinet Office Spokesperson Christine Jardine MP called for urgent measures to restore critical infrastructure and assist affected small businesses and organizations.
Impact on Air Travel
Research firm Cirium highlighted that today was set to be the busiest day for UK flight departures since October 2019, with over 3,214 planned. Airlines like Ryanair advised passengers to check their app for updates and arrive at the airport three hours in advance.
Rail Services Disruption
Govia Thameslink Railway (GTR), the parent company of Southern, Thameslink, Gatwick Express, and Great Northern, warned passengers of delays due to the outage. Some airline check-in services were being performed manually at Stansted Airport, although flights continued to operate normally.
South Western Railway reported that all its ticket vending machines had stopped working, advising passengers to purchase tickets online or from station staff.
Retail Sector Hit
Retailers, including Little Waitrose at Kings Cross Station, faced significant disruptions, with customers being informed that only cash payments were possible as card machines were not working. Long queues formed at self-checkouts that were rendered inoperable due to the IT issues.
Impact in India
India experienced significant disruptions due to the IT outage.
- Air Travel: Delhi Airport resorted to using a makeshift whiteboard to record departures as digital systems went down. Passengers faced delays and cancellations, leading to widespread confusion and long queues.
- Banking: Several banks reported difficulties in processing transactions, causing inconvenience to customers. ATMs went offline, and online banking services were severely impacted.
- Retail: Shops and supermarkets faced payment processing issues, forcing many to accept only cash transactions. Digital checkout systems stopped working, leading to long queues and frustration among shoppers.
- Healthcare: Hospitals and clinics experienced disruptions in their appointment scheduling systems, affecting patient care. Critical healthcare services faced delays due to the outage.
- Telecommunications: Telecom companies reported interruptions in their services, affecting internet and mobile connectivity across various regions.
Expert Analysis
Toby Murray, associate professor at The University of Melbourne, suggested that a “buggy” update to one of CrowdStrike’s products might be responsible for the global outage. He explained that Falcon, CrowdStrike’s Endpoint Detection and Response (EDR) platform, monitors and responds to threats, and a malfunction could cause widespread issues.
Conclusion
The largest IT outage in history has highlighted the fragility of our interconnected digital world. As engineers work to restore normalcy, the incident serves as a stark reminder of the importance of robust cybersecurity measures and the potential consequences of technical faults in an increasingly digital economy.