Microsoft Azure

Summary

A series of major outages at Amazon Web Services, Microsoft Azure, and Cloudflare caused widespread global disruption, highlighting the systemic risks of cloud infrastructure concentration. The outages triggered cascading service failures across multiple SaaS organizations and affected numerous online services and customer-facing platforms. This incident underscored how the reliance on a small number of dominant cloud providers creates significant operational and financial risks for organizations worldwide, as disruptions at a single provider can rapidly propagate across the global digital ecosystem.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Among the most significant cyber incidents catalogued for 2025 was a series of major outages affecting Amazon Web Services, Azure and Cloudflare. These events were collectively highlighted by Tokio Marine HCC International (TMHCCI) in its sixth annual cyber incidents report as a clear illustration of the systemic risk posed by the concentration of cloud infrastructure. Rather than stemming from a single malicious intrusion, the incidents were characterised as widespread service disruptions that rippled through the broader digital ecosystem. The report placed these outages alongside other major events affecting retail, automotive, telecommunications and luxury goods sectors, underscoring how the failure of a few large cloud providers can cascade into global operational disruption. By grouping AWS, Azure and Cloudflare together, TMHCCI emphasised that the incident's significance lay not in any one provider's individual failure but in the shared dependency organisations have on a small number of hyperscale cloud platforms.

The outages triggered cascading service failures across numerous software-as-a-service (SaaS) organisations and other customer-facing platforms that rely on these underlying cloud providers for hosting and delivery. Online services that depend on AWS, Azure and Cloudflare experienced downtime or degraded performance, affecting end users and businesses globally. The report highlighted that these events exposed how cloud concentration has become a defining feature of modern digital infrastructure, meaning that disruption at a single point can rapidly amplify across multiple sectors. Financial and operational impacts were felt by SaaS vendors and their customers, with downstream effects on online retail, enterprise applications and connectivity services. The incident reinforced concerns raised by TMHCCI's cyber security team about ransomware, technology supply-chain compromise and cloud infrastructure concentration as the principal drivers of systemic cyber risk for organisations worldwide.

TMHCCI's reporting framed the outages as a cautionary example of how the digital ecosystem's increasing reliance on a handful of major cloud providers creates shared vulnerability. The report, authored by Isaac Guasch, cyber security leader at TMHCCI, was designed to help the insurance market track emerging cyber threats and provide protection for insured parties. According to Xavier Marguinaud, head of Cyber at Tokio Marine HCC International, the past year marked a turning point as artificial intelligence evolved from a theoretical risk into an active threat, though the cloud outages were highlighted as a separate but equally significant systemic exposure. The inclusion of the AWS, Azure and Cloudflare outages among the ten most significant incidents of 2025 reflected their broad operational impact and their implications for how organisations understand and price cyber risk in an environment of concentrated cloud dependency.

Sources

Sources available to members: 1 source.