A critical Microsoft outage lasting more than 22 hours has prompted urgent questions about the concentration of essential services among a small number of technology companies and the vulnerabilities this creates for governments, businesses and public institutions worldwide.
The disruption, which affected Microsoft 365 services including Outlook, Teams, Copilot, SharePoint Online, OneDrive and OneNote, stemmed from routine automated checks that took some servers offline unexpectedly, overwhelming the remaining infrastructure with traffic. According to BBC News, the recovery process took nearly a full day as engineers gradually restored services, underscoring how deeply embedded the tech giant's infrastructure has become in modern operations.
The scale of the disruption was staggering. Around 430 million people globally use Microsoft 365, and problems were reported across more than 70 countries. BBC News reported that Downdetector recorded approximately 140,000 Outlook problem reports from 74 countries at peak disruption, though the actual number of affected users was likely substantially higher given that such tracking relies on voluntary reports. The incident, identified by Microsoft as incident EX1550543, expanded from intermittent Exchange Online connectivity problems in the Americas to potential Microsoft 365 connectivity issues spanning multiple regions.
The outage's consequences rippled across critical sectors. Email systems for the US House of Representatives went offline, Australian intelligence agencies lost access to essential services, court systems in Singapore experienced disruption, and airline support desks in India were knocked out. Within the UK, general practitioners, police forces and pharmacies faced significant operational challenges, while Welsh government agencies, emergency services, NHS health boards and local councils all reported disruptions.
Why did recovery take so long?
Microsoft explained that the extended recovery period was deliberate. A company spokesperson stated that
given the scale of demand, services were restored gradually. While this took longer, it helped ensure a stable restoration.To protect messages delayed during the outage, Microsoft extended its email timeout window to 48 hours, allowing the system to continue attempting delivery of messages that had been queued during the disruption.
Gergely Orosz, a former leading software engineer at several major technology companies, noted that while outages of this type were not unprecedented, the duration of Microsoft's recovery was unusual. He attributed this to the sheer scale of the infrastructure involved and the complexity of restoring services across so many interconnected systems simultaneously.
What does this reveal about our dependence on tech giants?
Flora Hamilton, executive director of the Small Business Charter, characterised the outage as a
stark reminder of how much firms rely on digital systems like Microsoft Outlook to keep their operations running.She emphasised that
for many small and medium-sized enterprises, access to email is fundamental to everything from communicating with customers and suppliers to generating income.
Walter Pasquarelli, an AI strategist, told BBC News that the outage had
put their vulnerabilities and dependence in plain sightfor governments, businesses and critical infrastructure operators. He warned that future disruptions could have even broader consequences:
Looking ahead, as AI assistants are plugged into our email, calendars and files, a failure like this may spread even further.
Orosz highlighted the underlying structural problem, stating that the incident demonstrated
our reliance on a few large US corporations.He suggested that one potential solution for the future would involve splitting services by geographic region to limit the impact of any single failure—an approach already employed by Amazon's cloud computing service, AWS.
What happens next?
Microsoft reported early stabilisation and capacity improvements on Friday, with recovery progressing in Europe and North America, though some users continued to face intermittent issues and delayed email delivery. The company said it would continue repairing affected infrastructure and monitoring recovery, though it had not provided a confirmed full-restoration time.
Microsoft has apologised for the disruption, characterising it as a technical failure rather than a cyber-attack. The company said it was conducting a comprehensive review of what went wrong, with findings expected to inform preventive measures to avoid similar incidents in the future.
