Global cyber outage blamed on security software update

Eurowings, the budget airline subsidiary of Germany's Lufthansa, said its domestic flights in Germany, as well as flights to and from the UK, were suspended until at least 3 p.m. (1300 GMT).

"Delays and flight cancellations are to be expected throughout the day," the company said in a statement, adding that passengers booked for domestic flights could take trains and then request reimbursement.

More than 50 flights were expected to be impacted by the delays and cancellations, brought on by the global IT outage.

A German supermarket chain, Tegut, had to close more than 300 stores after the global tech disruptions brought operations to a halt.

A spokesperson for the company said that checkout systems were not working leading the company to close all its stores on Friday morning as a precaution.

"We're working hard on a solution to the problems," Tegut said in a statement. "Currently we cannot say when the disruption will be fully resolved."

The major US carrier American Airlines said that it was resuming its flights after the global IT outage grounded all of its planes.

"Earlier this morning, a technical issue with a vendor impacted multiple carriers, including American," the company said in a statement on X, formerly Twitter.

"As of 5:00 a.m. ET (0900 GMT), we have been able to safely re-establish our operation. We apologize to our customers for the inconvenience," it added.

Numerous airports and airlines around the world were affected by Friday's disruptions, with numerous flights delayed or canceled.

Trade in the Russian currency seemed to have suffered few if any impacts from the IT outages on Friday, with a ministry saying the unimpeded operations showed that the country's import substitution in software development had been a success. 

According to Reuters news ageny, currency traders said their software and operating systems were functioning as usual, while the largest lender, Sberbank, also said it had no problems.  

One currency trader told Reuters: "Everyone has long been preparing for the possibility of Microsoft being cut off due to sanctions. The current incident is a test of how well we have prepared. So far, everything is fine."

Russia's Digital Development Ministry said in a statement that the global outage had shown that Moscow's strategy of promoting domestic alternatives to software from foreign companies such as Microsoft were working.

Microsoft began ceasing the provision of cloud services to Russian organizations earlier this year in line with EU sanctions over Moscow's invasion of Ukraine.

George Kurtz, the CEO of the cybersecurity firm CrowdStrike said IT disruptions around the world were not a result of a security incident or cyberattack. 

The company "is actively working with customers impacted by a defect found in a single content update for Windows hosts," Kurtz said on X, formerly Twitter.  

"This is not a security incident or cyberattack. The issue has been identified, isolated and a fix has been deployed," he added. 

The tech outage was caused by a "defect found in a single content update for Windows hosts," Kurtz said.

CrowdStrike's shares were down 20% in pre-market trading on Wall Street on Friday.

Microsoft's cloud computing platform Azure is believed to be the source of the global tech disruptions that have impacted airlines, media outlets and financial institutions.

The company said it was aware of the specific problem in a statement, several hours after the first reports of outages.

"We have been made aware of an issue impacting Virtual Machines running Windows, running the CrowdStrike Falcon agent, which may encounter a bug check (BSOD) and get stuck in a restarting state," it said.

It added that it was "currently investigating potential options Azure customers can take for mitigation."

Cybersecurity agencies in the UK and France have both said the global IT outage on Friday was in all probability not caused by a cyberattack.

A UK government source, speaking on condition of anonymity, said British cybersecurity experts were not treating it as a malicious act.

The French cyber agency also said there is "no evidence" that the outage was caused by cyber criminality.

"The teams are fully mobilized to identify and support the affected entities in France and to understand ... the origin of this outage," the national cybersecurity agency (ANSSI) said, adding "There is no evidence to suggest that this outage is the result of a cyberattack."

US tech giant Microsoft has said it is taking "mitigation actions" to resolve problems with its services.

The Federal Aviation Authority (FAA) said that major US airlines, including Delta, United and American Airlines, had grounded all of their flights amid the IT outage.

"All... flights regardless of destination" were grounded due to the "communication issues," the FAA said in a notice to airlines.

The widespread disruption is taking place during the nighttime in the US, potentially limiting the fallout of the tech disruptions.

The Paris Olympics' organizing committee said its IT operations have been affected by the global cyber outage, with just one week to go before the Games begin in the French capital on July 26.  

"We have activated contingency plans in order to continue operations," the committee said in a statement, without immediately giving details on the problems it was experiencing.

Spain's Aena, the world's largest airport operator based on passanger numbers, said it was recovering some of its systems after being hit by the global tech outage.

"All airports are operative, but some processes are working with delays," it said in a statement on X, formerly Twitter.

An earlier statement by the company said that the disruptions were mostly affecting check-in and passenger information points.

The Spanish state owns 51% of Aena which runs more than 60 airports, 46 of which are in Spain. It is the largest global operator in terms of passengers served, in large part due to the number of tourists visiting Spain every year.

Berlin airport has halted all flights until 10 a.m. (0800 GMT) due to a technical fault, a spokesperson told Reuters news agency on Friday.

The airport operator BER had earlier said in a post on social media platform X, formerly Twitter, that check-ins were delayed due to the error.

Germany's flagship airline Lufthansa also said it was experiencing problems with bookings.

"Currently, the profile and booking retrieval functionality may be limited. We are working on a solution and apologize for any inconvenience caused," the company said in a statement on its website.

Amsterdam Schipol Airport in the Netherlands has also said it is affected by a cyber outage, telling travelers wanting to travel on Friday to contact their airline.

Dutch airline KLM announced that it had suspended a large part of its operations due to the IT outage.

"KLM, like other airlines and airports, has also been affected by the global computer outage, making it impossible to handle flights," the company said. "For now, we are forced to suspend most of the operation."

Belgian media said baggage check-in at Brussels airport was affected as well.

The University Clinic in Schleswig-Holstein (UKSH) has also been hit by the global IT outage, according to a statement on the hospital's website.

Elective surgeries in both of its locations — Kiel and Lübeck — were canceled for Friday. Outpatient clinics were also closed.

"The treatment of patients at the UKSH is ensured, as are emergency services," it added.

The UK Sky News channel was once again broadcasting several hours after the widespread IT outage took it off the air.

"Sky News has not been able to broadcast live TV this morning, we apologise for the interruption," a spokesperson for the company told PA news agency earlier in the day.

"We are working hard to restore all services."

Australian broadcaster ABC was facing a similar outage.

The London Stock Exchange (LSE), a major global financial institution, has also been affected by Friday's technical glitch, the LSE company said in a statement.

A message on the website said the news feed "is currently experiencing a third-party global technical issue, preventing news from being published."

"Technical teams are working to restore the service. Other services across the group, including London Stock Exchange, continue to operate as normal."

The FTSE 100 Index opened 20 minutes later than usual.

Three Indian airlines have announced problems with the booking systems connected with the Microsoft issues.

"Our systems are currently impacted by a Microsoft outage," budget carrier IndiGo said in a post on social media platform X, formerly Twitter, with airlines Akasa Air and SpiceJet also reporting technical issues.