Microsoft 'deeply sorry' as outage threatens billions in losses and exposes Australia's reliance on foreign tech

Millions of users and businesses lost access to email and services; some Australian clinics reverted to paper prescriptions and small businesses face closure risk.
The straw that breaks the camel's back for smaller entities
Ashwin Pal of RSM Australia on what a long outage means for businesses with no fallback.
Mark

Eighteen hours is a long time. Why does this one matter beyond the inconvenience?

Mimi

Because of what stopped working. People couldn't get paid or send invoices, and some clinics went back to paper scripts. Email turned out to be the key to other systems.

Mark

That's the prescribing example, right?

Mimi

Yes. Dr Michael Bonning said multifactor verification for prescribing software depends on reaching Microsoft-supported email. So one outage cascaded into something unrelated.

Luke

Let me slow down on the billions. That's experts warning costs could reach billions, not a measured figure.

Mimi

Fair. It's a projection, and the closure risk for small businesses is a warning too, not a count of closures.

Luke

And the cause? Microsoft says technical, not an attack.

Mimi

Right, and it only suggests server settings may be responsible. Ashwin Pal's claim that an untested change was pushed is his view, not something Microsoft confirmed.

Mark

So what's actually settled?

Luke

The roughly 18-hour duration, the wide disruption, and Microsoft's apology. The root cause and total cost are still open.

Mimi

And the policy question, a review of single-provider dependence, is a call from the Australian Computer Society, not a government commitment.

  • A single untested change to Microsoft 365 server settings knocked email and apps offline for roughly eighteen hours across the globe.
  • Australian firms activated continuity plans, yet many small businesses had no fallback and now face the risk of closing.
  • Clinics reverted to paper prescriptions because logins depend on email-linked verification, and courts, schools and Service NSW scrambled.
  • Microsoft is restoring services gradually to keep recovery stable, while experts and the Australian Computer Society press for a review of single-provider dependence.
  • Microsoft shares slipped 1.1% at the open, and the open question is whether the company fully explains how the change slipped through.

On a Friday morning, millions of people across the world found their Microsoft email and applications suddenly out of reach, and for roughly eighteen hours the digital routines of work, care and government stood still in many places at once. Microsoft has named the cause as an internal technical fault in the settings of the servers that carry Microsoft 365, not an attack or the work of AI agents, and it is restoring services carefully while it apologises for the harm. In Australia, the moment has prompted a sober reckoning: how much of the nation's daily life rests on a single foreign provider, and how little fallback many small enterprises have when that foundation trembles.

On Friday morning, Australians who opened Microsoft email and apps found them not working. For about eighteen hours, millions of users, organisations and businesses around the world were cut off before services began to recover. Microsoft has apologised, saying it is "deeply sorry" and has addressed the underlying issue.

The company says the failure was technical, not a cyber-attack or the work of AI agents, and that it is bringing services back gradually. The cause may lie in settings applied to the servers that run Microsoft 365.

In Australia, experts warned the damage could reach billions of dollars. Ashwin Pal of RSM Australia said many businesses had no fallback at all, and that a prolonged event could be the straw that breaks the camel's back for smaller firms. The Australian Computer Society renewed its call for the government to review which critical systems depend on one provider.

The effects reached public life. Some clinics went back to paper prescriptions because logins rely on email-linked verification. Courts in South Australia and Victoria were hit, many schools were affected, and Service NSW asked customers to delay visits. The disruption also spread overseas, into UK police forces, US congressional offices and Japanese businesses that had to take orders by phone.

What remains to be seen is whether Microsoft explains in full how an untested change could cause such harm, and whether Canberra acts on calls to map its dependence on foreign technology.

On Friday morning, Australians who opened their Microsoft email and apps found them not working. For roughly 18 hours, millions of users, organisations and businesses around the world were cut off before services began to recover. Microsoft has since said it is "deeply sorry" and that it has "addressed the underlying issue".

The company says the failure was a technical fault, not the result of a cyber-attack or of AI agents, and that it is restoring services gradually so the recovery stays stable. It has suggested the cause may lie in the settings applied to the servers that keep Microsoft 365 running. Charles Lamanna, the company's executive vice-president of Copilot, said Microsoft regretted the disruption to customers and was working to fix it.

In Australia, experts warned that the economic damage could run into the billions of dollars and might force some small businesses to close. Ashwin Pal, a partner at the risk advisory firm RSM Australia, said his clients had activated business continuity and disaster recovery plans, but that many businesses had no fallback at all. A protracted event like this, he said, can easily be "the straw that breaks the camel's back" for smaller entities. He also said he was flabbergasted that it had happened, and that Microsoft had pushed out a change that should have been tested. Its evident struggle to recover, he added, raised bigger questions.

The Australian Computer Society renewed its call for the federal government to urgently review which critical IT systems depend on a single provider, and where backup options could keep the economy running. Its chief executive, Prins Ralston, said the outage had exposed Australia's reliance on foreign technology, particularly for small businesses. Australians who could not get paid, send an invoice or reach a government service, he said, are entitled to be worried.

The effects reached into public services. Hospitals and health clinics were affected, though the Australian Medical Association said there had been no impact on patient care. Its president, Dr Michael Bonning, said some facilities went back to paper for scripts, because logging in to many prescribing systems requires multifactor verification that depends on access to Microsoft-supported email. Courts in South Australia and Victoria reported that their email systems were hit, and many schools across the country were affected. Service NSW encouraged customers to delay visits to its service centres.

Federal departments were also disrupted, including national security agencies. Mike Burgess, head of the domestic spy agency Asio, said its systems operate on multiple levels and had been affected on one level, "but not completely".

The disruption was global. In the UK, healthcare systems were disrupted and several police forces asked people not to report crimes online and to phone instead. US government offices were affected, including congressional offices that rely heavily on Outlook; the US House's chief administrative officer sent a campus-wide alert to staff on Thursday, Politico reported. In Japan, the shipping company Sagawa Express could not take online reservations for some services at airports and train stations, and the pharmaceutical company Taisho had to handle orders by phone.

When Wall Street opened, Microsoft shares dipped 1.1% to $516.86. What to watch now is whether Microsoft explains in full how an untested change could cause this, and whether Canberra acts on calls to map which critical systems hang on a single foreign provider.

Australians who couldn't get paid, couldn't send an invoice, or couldn't reach a government service this morning are entitled to be worried.
— Prins Ralston, chief executive, Australian Computer Society
A protracted event like this can easily be the straw that breaks the camel's back for smaller entities.
— Ashwin Pal, partner, RSM Australia
Contattaci Domande frequenti