# The CrowdStrike outage: a small percentage, a huge impact

The 2024 incident shows why the denominator and the source of an estimate matter when reading breaking news.

[Canonical HTML page](https://nosecrets.app/en/stories/crowdstrike-2024-outage-what-sources-say)

Published by: [No Secrets Research](https://nosecrets.app/en/about#methodology)
Added: 2026-10-20
Topic: In the news

## Scope and context

Applies to: Global Windows ecosystem · historical case
Time context: Incident: July 19, 2024 · not a current outage
Sources checked: 2026-10-20

Retrospective based on the vendor and Microsoft’s public statements. Their accounts are attributed, not presented as independent forensic findings.

## What the vendor acknowledged

CrowdStrike says its July 19, 2024 content configuration update for the Windows sensor caused a widespread outage. It published a root-cause analysis on August 6. This points to a specific vendor update, rather than every Windows installation.

[1: CrowdStrike](https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/)

## An estimate has a denominator

On July 20, Microsoft estimated about 8.5 million affected Windows devices, less than 1% of Windows machines. It linked the outsized impact to CrowdStrike’s use by enterprises operating critical services. The number is Microsoft’s contemporary estimate.

[2: Microsoft](https://blogs.microsoft.com/blog/2024/07/20/helping-our-customers-through-the-crowdstrike-outage/)

## A way to read the next incident

Separate the triggering update, the affected population and the downstream disruption. Our takeaway: a small device share can still matter greatly when the affected systems support many people. Keep the incident date attached when resharing old posts.

[1: CrowdStrike](https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/) · [2: Microsoft](https://blogs.microsoft.com/blog/2024/07/20/helping-our-customers-through-the-crowdstrike-outage/)

## Sources

1. [Channel File 291 Incident: Root Cause Analysis is Available](https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/) — CrowdStrike. 2024-08-06. Vendor's account of the July 19 incident and link to its investigation.

2. [Helping our customers through the CrowdStrike outage](https://blogs.microsoft.com/blog/2024/07/20/helping-our-customers-through-the-crowdstrike-outage/) — Microsoft. 2024-07-20. Microsoft's contemporaneous estimate of affected Windows devices.

## Disclosure

AI-assisted research, writing and translation by No Secrets, using the linked public documents. This is a source summary, not firsthand reporting or an independently audited investigation. No affiliate links are used in this article.

The source-check date is not the event date. Original documents control if a summary differs.