Microsoft outage disrupts UK hospitals and schools, raising resilience questions

A major outage of Microsoft services on 13 November stopped emails and video calls for millions of users worldwide, including disruption to hospitals and schools. Microsoft said it was working to fix "connectivity problems". The cause was not clear at the time of the original analysis.

The incident follows UK government warnings to prepare for a possible cyber-attack. Writing in The Conversation, anthropologist A.R.E. Taylor, who carries out fieldwork in the data centre industry, argues that the bigger threat may be the fragile design of internet infrastructure itself.

Taylor points to the dominance of a small number of large corporations, a trend accelerated by the growth of cloud computing. Microsoft has previously described serving billions of customers as giving it a "unique vantage point", but Taylor says such concentration does not necessarily help resilience.

He notes this is not an isolated event. In July 2024 a faulty security update crashed millions of Windows systems, leaving pharmacies, airports and banks unable to operate. On 22 October, AI testing exposed security vulnerabilities in a programme underpinning roughly 70% of the world's websites, and governments and businesses took thousands of sites and services offline as a precaution.

Taylor stresses that digital infrastructure relies on people. Where organisations are understaffed or place heavy demands on staff, the capacity for thorough testing, monitoring and diagnostics may suffer. He says the work of restoring services will fall heavily on IT professionals in affected organisations, many of whom will face long hours and a physical and psychological toll.

The outage shows how far organisations have placed their operational continuity in the hands of major technology providers, Taylor argues. Schools, hospitals, businesses and charities all rely on Microsoft's infrastructure, and those that outsource essential digital operations to a single provider can be unable to function when it fails.

For manufacturers and suppliers that depend on cloud email, collaboration and other hosted systems, the argument raises a practical question about how much of their operation rests on a single provider.