Cloudflare down: X among apps not working after major internet outage

Large parts of the web are down for thousands of people – including X, formerly called Twitter – amid a problem with Cloudflare.

Issues with the platforms, which also include PayPal, ChatGPT, Letterboxd and bet365, began at around 11.20am.

The list of impacted sites includes the Scottish Parliament, Vinted, and one of the world’s most popular video games, League of Legends.

Problems with ID.me, the US government’s verification website, have also been flagged by users.

Have you been impacted? Get in touch with us by emailing josh.milton@metro.co.uk

Metro reader Marion Fenlon, who is in her 60s and lives in East Sussex, said she is struggling to pay her parking ticket and can’t buy anything online.

Why has some of the internet gone down?

Cloudflare is a company that helps nearly two in 10 websites secure and manage their internet traffic. Many of the platforms that were knocked offline use their servers.

More than 11,000 people were reporting issues with Cloudflare at 11.40am, according to outage tracker Downdetector.

Cloudflare said on its status webpage that the issue has been fixed, adding: ‘We believe the incident is now resolved.’

The company’s co-founder and CEO, Matthew Prince, apologised ‘for the pain we caused the Internet’ in a blog post.

Prince said that the outage was caused by the system it uses to protect websites from distributed denial of service (DDoS) attacks crashing.

DDoS are an attempt to disrupt a server’s traffic by overwhelming it, though Prince stressed the outage was not itself caused by a cyberattack.

A lot of technical jargon, but the system uses AI to figure out if it’s a human or a bot trying to access a website protected with Cloudflare. During this, the AI makes a file to jot down notes.

Cloudflare tweaked how the system makes a file and it’s here that the hiccup happened – the AI model made multiple copies of the same file, causing the system to buckle under the pressure of all these files.

Prince added: ‘After we initially wrongly suspected the symptoms we were seeing were caused by a hyper-scale DDoS attack, we correctly identified the core issue and were able to stop the propagation of the larger-than-expected feature file and replace it with an earlier version of the file.’

Is the outage a privacy risk at all?

No Cloudflare updates have said that personal user information has been at risk, as the issues were with access to services, not data.

The software company helps websites secure and manage their internet traffic – it doesn’t store personal information.

Rob Jardin, Chief Digital Officer at NymVPN, warned that when major digital infrastructure providers have an outage, privacy can be a worry.

‘Imagine you’re texting a friend, and suddenly the person managing the phone network can see who you are and what you’re doing. That’s essentially what happens,’ Jardin said to Metro.

Jardin added that today’s disruption is similar to the incident that shook Amazon Web Services, a major provider of cloud services.

AWS suffered a glitch during an update, causing an hours-long outage that dragged government websites, banks, games, streaming services, airlines and crypto platforms offline.

Are companies too reliant on third-party services like Cloudflare?

Going online is actually quite a tall order – and isn’t as invisible as it might feel to users.

It involves having giant data centres that can carry out demanding tasks like streaming video, running web applications and storing data.

These centres cost a pretty penny, so many companies instead rent them out from the tech giants that can afford to make and run them, like Amazon. Same goes for cybersecurity services like Cloudflare.

The recent outages show what happens when too many websites rely on one giant company’s infrastructure, Georgina O’Toole, a chief analyst and partner at TechMarketView, told Metro.

‘Hidden infrastructure, like Cloudflare, is easy to forget about when it is working, but as soon as it fails, the implications are widespread,’ she said.

‘The topic of organisational resilience will once again rise to the top of boardroom agendas, with conversations turning to how best to spread risk, reduce impact and mitigate against issues that can’t be prevented.’

Get in touch with our news team by emailing us at webnews@metro.co.uk.

For more stories like this, check our news page.

MORE: What would happen if the internet suddenly stopped working?

MORE: Using ChatGPT to plan your investments? Here’s what AI gets wrong

MORE: Kirstie Allsopp sparks backlash after ‘spiteful’ swipe at national treasure Michael Rosen