Breadcrumb Trail Links
Economy
Software that caused Microsoft Windows to crash plays havoc at businesses and public institutions
Article content
A global IT outage has affected airports, hospitals, news channels, betting firms and several other industries worldwide, including Canada, on Friday morning.
Here’s what you need to know.
What happened?
The problem is linked to cybersecurity firm CrowdStrike Holdings Inc. and its Falcon Sensor software, which is reportedly causing Microsoft Windows to crash and display a blue screen.
Advertisement 2
Article content
Company chief executive George Kutz used social media to say customers were impacted by a defect found in a “single content update” for Windows users and that Mac and Linux users were not impacted.
“This is not a security incident or cyberattack,” he said. “The issue has been identified, isolated and a fix has been deployed … our team is fully mobilized to ensure the security and stability of CrowdStrike customers.”
With this update, CrowdStrike “didn’t perform the required quality assurance steps to make sure the problem didn’t occur,” said Matt Holland, who heads Field Effect Software Inc., an Ottawa-based cybersecurity solutions provider. “This was entirely a preventable situation.”
CrowdStrike’s software works as an antivirus or protection platform that is supposed to keep computers safe. But many computers that use this software are crashing and then automatically rebooting.
“What you see is a blue screen and your machine would reboot again,” Holland said. “It’s something they call cycle crashing.”
The IT teams for companies using the software will have their “hands full for quite a few days” as they work on fixing the issues, he said.
Article content
Advertisement 3
Article content
CrowdStrike’s clients are mostly enterprises as opposed to small businesses, so when one thinks about fixing these issues on a large scale, “businesses might be doing cleanup for weeks to come and some machines may not even be recoverable,” Holland said.
Technology analyst Carmi Levy said CrowdStrike will have plenty of questions to answer in the coming days.
“We have to understand how an unknown error was allowed out into the wild and how that didn’t get caught,” he said. “Why were their testing procedures not enough to identify the problem?”
Who was affected in Canada?
Toronto Pearson International Airport on social media said it’s noticing issues with major American airline companies such as Delta Air Lines Inc., American Airlines Group Inc. and United Airlines Holdings Inc., as well as Porter Airlines Inc. However, it added that flights continue to arrive and depart at the airport.
“As of now, Air Canada, Westjet, Sunwing and Flair operations have not been affected,” it said.
Children’s Hospital of Eastern Ontario is also among the thousands of organizations affected by the CrowdStrike global outage.
Advertisement 4
Article content
“We are providing services as planned using workarounds where needed,” it said in a statement. “We do not anticipate any impact on our services offered to children and their families today.”
The University Health Network, which consists of Toronto General Hospital, Toronto Western Hospital, Princess Margaret Hospital and the Toronto Rehabilitation Institute, said the outage was impacting some of its systems.
“Clinical activity is continuing as scheduled, but some patients may experience delays,” it said in a statement.
Toronto-Dominion Bank said it was affected as well and that its customers may experience “intermittent service impacts, including longer wait times.” The issue might have affected certain customers who were expecting to receive their salaries on Friday, according to Levi.
Who else was affected?
Outside Canada, media reports suggest that Australia appears to be severely impacted by the issue. Disruption has been reported on the DownDetector site at companies including the banks National Australia Bank Ltd., Commonwealth Bank of Australia and Bendigo and Adelaide Bank Ltd., the airlines Virgin Australia Airlines Pty Ltd. and Qantas Airways Ltd., as well as internet and phone providers such as Telstra Group Ltd., according to Reuters.
Advertisement 5
Article content
National news outlets — including public broadcaster ABC and Sky News Australia — were unable to broadcast on their TV and radio channels for hours. Hospitals in several countries also reported problems, according to Reuters.
Britain’s National Health Service (NHS) said the outage caused problems at most doctors’ offices across England. The outage has also affected gambling sites.
You might have seen the news about the global technical issue affecting airlines, banks, etc.,” Ladbrokes Coral said on X, formerly known as Twitter. “Unfortunately, we’re experiencing this too. We’re working hard to resolve the issue but don’t know when it will be fixed.”
Some hospitals in northern Germany cancelled all elective surgeries scheduled for Friday, but emergency care was unaffected.
The New Zealand banks ASB Bank Ltd. and Kiwibank Ltd. said their services were down as well.
Recommended from Editorial
Everything you need to know about the state of alcohol sales in Ontario
Who covers the gas tax when the electric revolution hits?
London Drugs shuts all its stores after cybersecurity incident
Advertisement 6
Article content
There are, however, signs that some companies and services are beginning to get back up and running, according to various media reports.
However, the wide-scale effects highlight the importance of cybersecurity vendors ensuring their products are well tested, Holland said.
Updates are important to remain safe against attackers, but at no point “can we ever take for granted the responsibility that we have as an industry to make sure we don’t cause more harm than good. It’s a good reminder to take quality assurance and testing very seriously,” he said.
• Email: nkarim@postmedia.com
Bookmark our website and support our journalism: Don’t miss the business news you need to know — add financialpost.com to your bookmarks and sign up for our newsletters here.
Article content
Share this article in your social network