CrowdStrike and Microsoft: What we know about global IT outage (2024)

CrowdStrike and Microsoft: What we know about global IT outage (1)CrowdStrike and Microsoft: What we know about global IT outage (2)EPA

A massive tech failure has caused travel chaos around the world, with banking and healthcare services also badly hit.

Flights have been grounded because of the IT outage - a flaw which left many computers displaying blue error screens.

There were long queues, delays and flight cancellations at airports around the world, as passengers had to be manually checked in.

Cyber-security firm CrowdStrike has admitted that the problem was caused by an update to its antivirus software, which is designed to protect Microsoft Windows devices from malicious attacks.

Microsoft has said it is taking "mitigation action" to deal with "the lingering impact" of the outage.

Here is a summary of what we know so far.

What caused the outage?

This is still a little unclear.

CrowdStrike is known for producing antivirus software, intended to prevent hackers from causing this very type of disruption.

According to CrowdStrike boss George Kurtz, the issues are only impacting Windows PCs and no other operating systems, and were caused by a defect in a recent update.

"The issue has been identified, isolated and a fix has been deployed," he said.

"This is not a security incident or cyber-attack."

What exactly was wrong with the update is yet to be revealed, but as a potential fix involves deleting a single file, it is possible that just one rogue file could be at the root of all the mayhem.

When will it be fixed?

It could be some time.

CrowdStrike's Mr Kurtz, speaking to NBC News, said it was the firm's "mission" to make sure every one of its customers recovered completely from the outage.

"We're deeply sorry for the impact that we've caused to customers, to travellers, to anyone affected by this, including our companies," he said.

He has since told CNBC that while some systems can be fixed quickly, for others it "could be hours, could be a bit longer".

CrowdStrike has issued its fix. But according to those in the know, it will have to be applied separately to each and every device affected.

Computers will require a manual reboot in safe mode - causing a massive headache for IT departments everywhere.

What's the solution?

Something important to note here, is that personal devices like your home computer or mobile phone are unlikely to have been affected - this outage is impacting businesses.

Microsoft is advising clients to try a classic method to get things working - turning it off and on again - in some cases up to 15 times.

The tech giant said this has worked for some users of virtual machines – computers which are accessed remotely.

“Several reboots (as many as 15 have been reported) may be required, but overall feedback is that reboots are an effective troubleshooting step at this stage," it said.

It is also telling customers with more in-depth computing knowledge that they should delete a certain file - the same solution one CrowdStrike employee has been sharing on social media.

But this fix is intended for experts and IT professionals, not regular users.

Which airports have been affected?

The problems have emerged across the world, but were first noticed in Australia, and possibly felt most severely in the air travel industry, with more than 3,300 flights cancelled globally.

  • UK airports saw delays, with long queues at London's Stansted and Gatwick.
  • Ryanair said it had been "forced to cancel a small number of flights today (19 July)" and advised passengers to log-on to their Ryanair account, once it was back online, to see what their options are.
  • British Airways also cancelled several flights.
  • Several US airlines, notably United, Delta and American Airlines, grounded their flights around the globe for much of Friday. Australian carriers Virgin Australia and Jetstar also had to delay or cancel flights.
  • Airports in Tokyo, Amsterdam and Delhi were also impacted.

Meanwhile, the problems have also hit payment systems, banking and healthcare providers around the world.

Railway companies, including Britain’s biggest which runs Southern, Thameslink, Gatwick Express and Great Northern, warned passengers to expect delays.

In Alaska, the 911 emergency service was affected, while Sky News was off air for several hours on Friday morning, unable to broadcast.

How could it affect me?

The outage might also impact people getting paid on time.

Melanie Pizzey, head of the Global Payroll Association, told PA news agency that she'd been contacted by "numerous clients" who couldn't access their payroll software.

She said the outage could mean firms are unable to process staff payments this week, but there may be a knock-on effect too.

"We could see a backlog with regard to processing payrolls for the coming month end, which may delay employees from receiving their monthly wage," she said.

If you're worried about your own, personal devices, we have some good news.

The software at the centre of this outage is generally used by businesses, which means that most people's personal computers won't be impacted.

That means if you're wondering whether you need to delete a certain file to avoid your computer restarting constantly, the simple answer is no, you don't.

What is CrowdStrike?

It's a reminder of the complexity of our modern digital infrastructure that CrowdStrike, a company that's not exactly a household name, can be at the heart of such worldwide disarray.

The US firm, based in Austin, Texas, is a listed company on the US stock exchange, featuring in both the S&P 500 and the high-tech Nasdaq indexes.

Like a lot of modern technology companies, it hasn't been around that long. It was founded a mere 13 years ago, but has grown to employ nearly 8,500 people.

As a provider of cyber-security services, it tends to get called in to deal with the aftermath of hack attacks.

It has been involved in investigations of several high-profile cyber-attacks, such as when Sony Pictures had its computer system hacked in 2014.

But this time, because of a flawed update to its software, a firm that is normally part of the solution to IT problems has instead caused one.

In its last earnings report, CrowdStrike declared a total of nearly 24,000 customers. That's an indication not just of the size of the issue, but also the difficulties that could be involved in fixing it.

Each of those customers is a huge organisation in itself, so the number of individual computers affected is hard to estimate.

Additional reporting by Imran Rahman-Jones, Liv McMahon and Tiffany Wertheimer.

Cyber-security

CrowdStrike and Microsoft: What we know about global IT outage (2024)

FAQs

Did CrowdStrike cause the Microsoft outage? ›

The historic outage was the result of a faulty update from the cybersecurity company CrowdStrike that affected millions of computers running the Microsoft Windows operating system.

What is the worldwide outage of CrowdStrike? ›

On July 19th, 2024, Windows 7 and above systems running CrowdStrike's Falcon sensor were served a faulty channel file that caused kernel instability and would result in a Blue Screen of Death (BSOD) loop and the largest global IT outage in history. The culprit is Channel File 291 (named with a pattern 'C-00000291-*.

What is the global outage of Microsoft? ›

It comes less than two weeks after a major global outage left around 8.5 million computers using Microsoft systems inaccessible, impacting healthcare and travel, after a flawed software update by cybersecurity firm CrowdStrike. "While the initial trigger event was a Distributed Denial-of-Service (DDoS) attack...

How is Microsoft affected by CrowdStrike? ›

Microsoft Crowdstrike: Widespread Industry Interruptions

Major airlines such as American Airlines, Delta Air Lines, and United Airlines issued ground stops, leading to extensive delays and cancellations. By early morning,​ over 1,352 flights in the US were delayed or canceled.

What was the root cause of the CrowdStrike outage? ›

CrowdStrike has published its root cause analysis about the update crash that turned off millions of Microsoft Windows devices globally. The crash occurred because there was a mismatch between the 21 inputs passed to the CrowdStrike content validator and the 20 supplied to the content interpreter.

What is the lesson learned from the CrowdStrike outage? ›

The outage underscored the need for comprehensive third-party risk assessment and management. Organizations must have a clear understanding of their dependencies and develop contingency plans for when critical vendors experience disruptions.

What is the global issue with CrowdStrike? ›

But this was not a Microsoft issue. It was all to do with a U.S. cybersecurity firm called CrowdStrike which sent out a buggy software update that crashed Windows. Industries across the board were hit, with airlines cancelling flights, broadcasters not able to go to air and shops not being able to open.

What is causing the Global IT outage? ›

A massive outage was caused by what was supposed to be a routine update from the cybersecurity company CrowdStrike. Global computer outage is one of the biggest in history.

Which banks are affected by CrowdStrike outage? ›

According to monitoring app Downdetector, the following banks have been affected by the Crowdstrike outages:
  • Arvest Bank.
  • Bank of America.
  • Capital One.
  • Charles Schwab.
  • Chase.
  • TD Bank.
  • US Bank.
  • Wells Fargo.
Jul 19, 2024

What is being affected by Microsoft outage? ›

Communication channels like Teams and Outlook went silent, hindering collaboration and internal communication. File sharing and access through OneDrive became unavailable, stalling workflows and productivity. Financial institutions faced disruptions, with banks struggling to process transactions and access data.

What is global outage? ›

The incident, which affected 8.5 million Microsoft Windows devices, led to widespread disruptions of airlines, banks, broadcasters, healthcare providers, retail payment terminals and cash machines globally. The cost of the outage is estimated to top $1 billion.

When did the CrowdStrike outage start? ›

On July 19, 2024, as a result of a faulty update to CrowdStrike Falcon sensor configuration for Windows systems, intended to enhance security by targeting newly observed malicious activities, there was an inadvertent logic error that led to widespread system crashes and blue screens of death (BSOD) on affected machines ...

Is the CrowdStrike outage fixed? ›

CrowdStrike itself was able to identify and deploy a fix for the issue in 79 minutes. While CrowdStrike quickly identified and deployed a fix for the issue, the recovery process for businesses is complex and time-consuming.

What exactly happened with CrowdStrike? ›

As the fallout continues, CrowdStrike has released a post-incident review (PIR) detailing the buggy update that caused 8.5 million Windows machines to crash last week. The review attributes the issue to a flaw in the test software, which failed to properly validate the content update pushed out on Friday.

Will CrowdStrike recover? ›

We are working closely with impacted customers and partners to ensure that all systems are restored, so you can deliver the services your customers rely on. CrowdStrike is operating normally, and this issue does not affect our Falcon platform systems.

Who is responsible for the Microsoft outage? ›

What we know about the global Microsoft outage. A massive outage was caused by what was supposed to be a routine update from the cybersecurity company CrowdStrike.

Why did Microsoft's outage happen? ›

The global outage that affected computer systems, applications, banks, and even airlines, happened due to a bug in the software update of CrowdStrike, say reports. Disclaimer Statement: This content is authored by a 3rd party.

What was the impact of the CrowdStrike incident? ›

Impact of the Incident

The CrowdStrike update incident had a profound impact, affecting nearly 8.5 million Microsoft devices across various user groups. The incident caused a significant IT outage that reverberated globally. Critical systems faced disruptions, leading to widespread consequences.

Did the CrowdStrike outage affect personal computers? ›

The CrowdStrike-Microsoft outage that disrupted flight operations globally, flashing the Blue Screen of Death (BSOD) on several enterprise Windows PCs last week, did not affect Windows computers used at home.

Top Articles
Latest Posts
Article information

Author: Greg Kuvalis

Last Updated:

Views: 6199

Rating: 4.4 / 5 (75 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Greg Kuvalis

Birthday: 1996-12-20

Address: 53157 Trantow Inlet, Townemouth, FL 92564-0267

Phone: +68218650356656

Job: IT Representative

Hobby: Knitting, Amateur radio, Skiing, Running, Mountain biking, Slacklining, Electronics

Introduction: My name is Greg Kuvalis, I am a witty, spotless, beautiful, charming, delightful, thankful, beautiful person who loves writing and wants to share my knowledge and understanding with you.