The story begins at a check-in counter in Dallas Fort Worth on July 19, 2024. A passenger watches a gate agent stare at a blue screen. The agent knows exactly as much as the traveler. Nothing.
What unfolded was the largest IT outage in aviation history. A faulty update from cybersecurity firm CrowdStrike sent Windows machines worldwide into a recovery boot loop. American Airlines, Delta, and United asked the FAA for a global ground stop. By 4 p.m. ET, at least 2,537 U.S. flights were canceled and 8,376 delayed. Delta and American led the cancellations.
At its heart, this was not a cyber attack. CrowdStrike CEO George Kurtz said a defect in a single Falcon content update for Windows hosts caused the chaos. Mac and Linux hosts were not impacted. A fix was deployed, but for machines already caught in the loop, rebooting was not enough. “could be hours, could be a bit longer” Kurtz told CNBC.
For those involved, the disruption went far beyond airports. Hospitals canceled elective surgeries. 911 dispatch centers went down in Alaska, Arizona, and New Hampshire. The London Stock Exchange, Google Cloud, and Berlin Airport all reported issues. The D.C. Metro saw internal systems fail. In India, passengers received handwritten boarding passes.
President Biden was briefed. The White House said it was not a cyber attack but a faulty technical update. The Transportation Department reminded travelers of their rights at FlightRights.gov. Waivers began appearing after the department said the outage fell within airline control.
Southwest and Alaska appeared largely unaffected. Southwest, reportedly still running Windows 3.1 on some systems, dodged the bullet. Alaska said its systems were not impacted, though busy airports funneled delays their way.
American offered waivers for tickets bought by July 18 for travel July 19-25. United covered flights to LAX, O’Hare, and Orlando. Delta waived fare differences for rebooked travel on or before July 24. The FAA told controllers to inform airborne pilots of communication issues. Flights already in the air continued to their destinations.
CrowdStrike shares fell nearly fifteen percent in early trading, hitting their lowest level since May. Kurtz apologized in a letter to customers and partners, promising full transparency on how it occurred and steps to prevent recurrence. The question now is not just when systems recover, but whether the architecture of modern air travel can survive its own complexity.
Sources
- Huge Microsoft outage hits airlines — live updates on Delta, United, American, Southwest and more | Tom's Guide
- CrowdStrike outage sparks global chaos with airline, bank and other disruptions – ABC News
