The outage, reportedly linked to a new CrowdStrike update, caused widespread disruptions, including issues for airlines, banks, and media outlets.
In an unprecedented global outage, Microsoft services including Microsoft 365, Azure, and Teams faced significant disruptions, affecting millions of users and businesses worldwide.
The outage, attributed to a new update from cybersecurity firm CrowdStrike, caused substantial operational challenges for airlines, banks, stock exchanges, healthcare services, and media outlets. The impact was notably severe in India, where numerous sectors experienced major setbacks.
We're investigating an issue impacting users ability to access various Microsoft 365 apps and services. More info posted in the admin center under MO821132 and on https://t.co/W5Y8dAkjMk
— Microsoft 365 Status (@MSFT365Status) July 18, 2024
Major airline disruptions
The outage severely impacted air travel, grounding flights and causing extensive delays. In India, airlines such as IndiGo, Akasa, Air India, and SpiceJet faced operational challenges, leading to long queues and flight delays at major airports, including Delhi and Mumbai. Similarly, US carriers like Frontier Airlines, Allegiant, and Sun Country reported issues affecting their services.
In a standard advisory, Air India reported that its digital systems were temporarily affected by the ongoing Microsoft outage, leading to delays.
Customer Advisory
Airport travel systems across the world have been impacted due to a tech outage and this may affect your travel plan. If you are flying with us today, we request you to check the status of your flight before heading to the airport.#AirIndia— Air India (@airindia) July 19, 2024
KLM Royal Dutch Airlines announced it was forced to suspend most operations due to the outage. Berlin Airport halted all flights, and Amsterdam's Schiphol Airport, one of Europe's busiest hubs, reported significant disruptions. Major US airlines, including American Airlines, Delta, and United, also grounded flights.
According to aviation analytics firm Cirium, over 1,000 flights have been cancelled worldwide today, with the number expected to increase.
Due to the global IT issue, some of the services at the Delhi Airport were temporarily impacted.
We are closely working with all our stakeholders to minimise the inconvenience to our flyers.— Delhi Airport (@DelhiAirport) July 19, 2024
Financial sector impact
The outage disrupted operations of stock exchanges globally. The London Stock Exchange faced technical issues, and several brokerage firms, including Nuvama, Edelweiss, and Motilal Oswal in India, reported disruptions. Payment systems worldwide, including in India, were also affected, causing delays and service interruptions.
We are experiencing login issues on our website due to a Microsoft outage.
Our team is actively working to resolve this as quickly as possible.— Edelweiss Mutual Fund (@EdelweissMF) July 19, 2024
Healthcare and emergency services
Healthcare services were hit hard, with hospitals and clinics unable to access patient records, test results, or medication histories. In the UK, GPs prioritised emergency cases due to the outage, leading to a backlog in clinical documentation. German hospitals cancelled elective surgeries, and emergency services in the US, including 911 call centres, faced disruptions.
Media and telecommunications
News services across the globe were disrupted. Britain's Sky News and Australia's ABC News were unable to broadcast live. The Associated Press faced intermittent service disruptions, and several telecommunications providers in Australia and New Zealand reported outages.
Instagram outage
Instagram experienced a global outage, leading to login problems for users, as reported by DownDetector. By 1:15 pm in India, around 170 outage reports had been logged. The Instagram issue compounded the widespread disruption, further affecting users' access to social media platforms.
Impacted Microsoft services
Microsoft has identified the following services as affected:
-
Microsoft 365 Admin Center: Admins may face intermittent access issues, with delays in any actions if access is possible.
-
Microsoft Fabric: Users might notice the service is in read-only mode during the resolution process.
-
Microsoft Purview: Users may experience delays in event processing.
-
Microsoft Teams: Users may be unable to use certain functions, such as presence indicators, group chats, and user registration.
-
PowerBI: Users may experience that the service is in read-only mode while issues are being addressed.
-
Viva Engage: Users may have difficulties accessing Viva Engage.
Blue screen of death
The outage triggered the infamous "Blue Screen of Death" on Windows operating systems, signaling severe system errors. This issue disrupted users' access to various Microsoft apps and services worldwide, including Microsoft 365, Microsoft Teams, and Microsoft Azure.
Microsoft and CrowdStrike respond
Microsoft's 365 account on X (formerly Twitter) confirmed that investigations and mitigation efforts are ongoing.
The company stated, "Multiple services are continuing to see improvements in availability as our mitigation actions progress." Microsoft 365 also posted on X that they are "working on rerouting the impacted traffic to alternate systems to alleviate the impact more quickly" and that they are "observing a positive trend in service availability."
Microsoft attributed the outage to a "configuration change in a portion of our Azure backend workloads," which caused connectivity failures. The problem is associated with CrowdStrike’s Falcon sensor. Users have reported on social media that the tech glitch has led to Windows machines encountering blue screen errors and getting stuck in a recovery loop.
We're aware of an issue with Windows 365 Cloud PCs caused by a recent update to CrowdStrike Falcon Sensor software. This is being communicated under WP821561 in the admin center. (Cont...)
— Microsoft 365 Status (@MSFT365Status) July 19, 2024
CrowdStrike CEO George Kurtz clarified that the issue was due to a defect in a single content update for Windows hosts, not a security incident or cyberattack. "CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts. Mac and Linux hosts are not impacted. This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed," Kurtz stated.
CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts. Mac and Linux hosts are not impacted. This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed. We…
— George Kurtz (@George_Kurtz) July 19, 2024
Government and experts respond
The Indian government, through the Ministry of Electronics and Information Technology, is in discussions with Microsoft to resolve the issue.
MEITY is in touch with Microsoft and its associates regarding the global outage.
The reason for this outage has been identified and updates have been released to resolve the issue.
CERT is issuing a technical advisory.
NIC network is not affected.— Ashwini Vaishnaw (@AshwiniVaishnaw) July 19, 2024
Indian IT Minister Ashwini Vaishnaw confirmed that the reason for the outage had been identified and updates were released to resolve it. "We are in touch with Microsoft to expedite the resolution of this global outage that has disrupted flights, supermarkets, banking operations, and multiple sectors," he said.
Professor Jill Slay, the University of South Australia’s SmartSat Chair for Cybersecurity, described the outage's global impact as "enormous" but cautioned that it was "too early to draw conclusions" on its cause. "There is currently a major global technical outage affecting multiple companies and services," she told CNN. "Authorities and industry will be monitoring, but at this stage, it is too early to draw conclusions."
Recovery efforts and advisory
Microsoft and CrowdStrike are actively working to resolve the issue. Microsoft noted, "We're investigating an issue impacting users' ability to access various Microsoft 365 apps and services. We're continuing to reroute the affected traffic to healthy infrastructure."
The Computer Emergency Response Team (CERT) of the Indian government issued an advisory with steps to resolve the issue:
CERT-In advisory on the outage of Microsoft. https://t.co/QFo6oGqlCG pic.twitter.com/7vmR80cEII
— Ashwini Vaishnaw (@AshwiniVaishnaw) July 19, 2024
-
Boot Windows into Safe Mode or the Windows Recovery Environment.
-
Navigate to the C:\Windows\System32\drivers\CrowdStrike directory.
-
Locate and delete the file matching "C-00000291*.sys".
-
Boot the host normally.
Current status
As of now, Microsoft reports that multiple services are seeing continuous improvements as mitigation actions progress. Users and businesses worldwide continue to experience disruptions, but efforts to restore full functionality are ongoing.
The situation remains dynamic, with Microsoft, CrowdStrike, and affected sectors working diligently to resolve the issues and restore normal operations. The full extent of the outage's impact is still unfolding, with further updates expected as more information becomes available.