Australia’s Minister for Cyber Security says the fallout from Friday afternoon’s failed CrowdStrike update may take weeks to fully recover from, while AMP’s chief economist tells Forbes Australia the global cost will be in the billions of dollars.
Further details are emerging about the global impact of Friday’s CrowdStrike outage, which saw 8.5 million Windows devices impacted in what is being labelled as the world’s biggest IT failure.
“While software updates may occasionally cause disturbances, significant incidents like the CrowdStrike event are infrequent. We currently estimate that CrowdStrike’s update affected 8.5 million Windows devices, or less than one per cent of all Windows machines,” Microsoft said in a statement.
“While the percentage was small, the broad economic and societal impacts reflect the use of CrowdStrike by enterprises that run many critical services.”
In Australia, that economic impact could be in the billions, according to Shane Oliver, AMP’s chief economist and head of investment strategy.
“Its impossible at this stage to work out the precise impact economic impact in terms of GDP. I know it will be billions of dollars in terms of wasted time and costs for Australian and global businesses,” Oliver told Forbes Australia on Sunday evening.
Oliver cautions, however, that the impact of the outage was not felt by everyone and that it may be hard to quantify. The timing on Friday evening meant that businesses had time to recover before opening on Monday.
“It was late on Friday when many office workers were winding down anyway – people still eventually got their shopping, planes eventually took off, newspapers and most media broadcasts still went out as far as I can tell, office workers etc still got paid.”
Shane Oliver, AMP’s chief economist
He notes that his Windows 365 computer was not affected. Those that did suffer outages were subject to delays moreso than cancellations.
“I suspect in terms of Australia it may not show up as a big impact in economic stats because not everyone was affected,” says Oliver.
Australia’s vulnerability to digital disruption
Claire O’Neil, the Minister for Cyber Security and the Minister for Home Affairs, described the outage as a “serious incident for the Australian economy”.
“This is a really significant incident that’s occurred here, and there will be a long run of discussions about what we’ve learned and who is ultimately culpable,” she said.
The Melbourne-based Minister has been involved in the government’s National Coordination Mechanism meetings this weekend.
“CrowdStrike informed the meeting this morning that they are now close to rolling out an automatic fix to the issue with their update, as is Microsoft. This should increase the speed at which systems across the economy are back online,” O’Neil said on Sunday afternoon.
“I am personally thankful to every worker, both in IT and across the economy, who has worked through this weekend to get our economy moving again.”
The Minister again cautioned Australians that scammers are actively looking to take advantage of people trying to overcome problems associated with the outage.
“Examples that have been reported include people posed as airlines offering to resolve issues with delayed flights and criminals posing as technical support offering to fix affected technology,” she said.
O’Neil asked the public to remain vigilant.
“It is very important that Australians are extremely cautious of any unexpected texts, calls or emails claiming to be assistance with this issue. You can help by making sure vulnerable people, including elderly relatives, are being extra cautious at this time.”
Australian supermarkets still impacted
Minister O’Neil also provided an update on the industries that are still impacted by the outage.
“Supermarkets, like many other sectors, are still experiencing issues, but the sector stressed that there are no food shortages and no need to stockpile food,” O’Neil wrote on Twitter on Sunday afternoon.
“There has been a huge amount of work over this weekend to get the economy back up and running. However, it will take time until all affected sectors are completely back online. In some cases we may see teething issues for one or two weeks.”
“There is no impact to critical infrastructure or government services. Triple 0 and emergency services are completely operational.”
CrowdStrike advises on releasing Bitlocker keys
The Australian Signals Directorate (ASD) issued an updated alert on Sunday afternoon.
“CrowdStrike has released further technical advice to support customers who may be experiencing remediation difficulties due to Bitlocker implementations,” the ASD states.
Bitlocker keys can be recovered by following the CrowdStrike advice here.
Microsoft provided further updates over the weekend also.
“This incident demonstrates the interconnected nature of our broad ecosystem — global cloud providers, software platforms, security vendors and other software vendors, and customers. It’s also a reminder of how important it is for all of us across the tech ecosystem to prioritise operating with safe deployment and disaster recovery using the mechanisms that exist,” Microsoft states.
“As we’ve seen over the last two days, we learn, recover and move forward most effectively when we collaborate and work together. We appreciate the cooperation and collaboration of our entire sector, and we will continue to update with learnings and next steps.”
Are you – or is someone you know -creating the next Afterpay or Canva? Nominations are open for Forbes Australia’s first 30 under 30 list. Entries close midnight, July 31, 2024.
Look back on the week that was with hand-picked articles from Australia and around the world. Sign up to the Forbes Australia newsletter here or become a member here.
