A single flawed content update from CrowdStrike crashed millions of Windows machines worldwide in what Microsoft and outside researchers have called the largest IT outage in history — grounding flights, closing hospitals, and knocking broadcasters off air.
Sources are linked inline; figures are the most recent public estimates as of this page's last update.
This incident is a textbook case of MTTR being dominated by the recovery step, not the diagnosis step.
The software responsible for stopping breaches was the cause of the outage — a reminder that security tooling with kernel-level access is also a single point of failure, and update pipelines deserve the same staged-rollout discipline as any other production change.
Because affected machines couldn't boot, IT teams had to physically or manually touch each device — the single factor that turned an 80-minute defect into a multi-day recovery for large fleets, especially ones with encrypted drives requiring recovery keys.
Airlines suffered the highest per-company loss of any sector in Parametrix's estimate, not because they had more machines, but because a grounded flight cascades into crew scheduling and passenger rebooking costs for days — the same cascading-delay dynamic modeled on the airline calculator.
Questions that come up when citing this incident in a resilience or vendor-risk conversation.
Mode
Accent