CrowdStrike outage impacts Medford website, Providence Health System, airport

Published 2:30 pm Friday, July 19, 2024

The faulty security update that took down many major banking, airline and hospital servers running Microsoft Windows also cast ripples in the Rogue Valley.

The city of Medford’s website was down for the first half of the day Friday, and many services throughout the Providence Health System were similarly affected by an update issued by the cybersecurity firm CrowdStrike.

The error that rendered many major companies around the world inoperable Friday was not caused by hacking or cyberattacks, nor was it caused by Microsoft. Rather it was an update issued by the Austin, Texas-based cybersecurity firm for use on Windows computers.

It prevented computers from restarting with what’s commonly known among Windows users as a “blue screen of death” and an error code. According to national news reports, CrowdStrike has a fix, but implementing it will take time.

Reached for comment, a Providence spokesperson issued a prepared statement saying its information technology teams “have been working overnight” to respond to the outage and to bring systems back online.

As of Friday afternoon, Providence said that they had restored “key functionality” in its electronic health record system known as Epic. The restored functionality ensures that nurses, doctors and other caregivers have access to patients’ records and clinical documentation.

Other “clinical applications and workstations,” however, were still impacted as of Friday afternoon. The health care provider stated that IT workers are “working to restore these services as soon as possible.”

Because the CrowdStrike incident was the result of a faulty update rather than a cyberattack, Providence states that they have “no reason to believe there are any impacts to data privacy and security.”

The outage, however, is prompting reports of phishing emails posing as messages from CrowdStrike or Microsoft, according to Providence. The health care provider recommends that locals not click on unfamiliar links, and that they not share personal or sensitive information with people over the phone.

Calls to a city of Medford spokesperson were not immediately returned Friday afternoon, but the city posted on its official Facebook page at 6:55 a.m. that its website was down “due to today’s widespread IT outage caused by the CrowdStrike incident.”

By 11:57 a.m., the city had updated its page, stating the city’s website “is back up and running” and thanking locals for their “patience and understanding.”

Rogue Valley International-Medford Airport director Amber Judd said in an email Friday afternoon that one flight was canceled last night due to the CrowdStrike outage.

“Other flights were delayed this morning but it seems the airlines are back to normal operations at this time,” Judd said.

Marketplace