Intro
On 19 July 2024, a single faulty update from cybersecurity firm CrowdStrike crashed millions of Windows computers. Airports, banks and government services in Europe and the United States ground to a halt. But two countries were largely unaffected: Russia and China. Why? And what does this say about digital sovereignty?
The biggest IT outage in modern history
The flawed CrowdStrike update hit only Microsoft Windows systems, triggering blue screen loops on millions of machines. The consequences: thousands of flights cancelled, banks and hospitals disrupted, and billions in economic losses. Western countries were hit hardest because Windows is deeply embedded in critical infrastructure like aviation, logistics and finance.
Russia: no CrowdStrike, little Windows – no crisis
In Russia, 19 July 2024 passed almost without incident. CrowdStrike had withdrawn from the Russian market after sanctions in 2022, so the update was never deployed there. Russia has long pursued a policy of import substitution: Western software is replaced by domestic alternatives. Critical systems run on Astra Linux, a Russian operating system certified for defense and intelligence. Sectors that collapsed in the West – aviation, banking, energy – continued to operate normally in Russia. The crisis was tangible proof of Russian digital independence.
China: largely unscathed
China also largely avoided the fallout. The government and military use their own operating systems such as Kylin OS, and the security market is dominated by Chinese vendors. Essential infrastructure runs on local cloud platforms instead of Microsoft 365. Only some foreign companies in China experienced disruptions. For Beijing, this served as further justification to promote technological self-sufficiency.
Digital sovereignty as a geopolitical weapon
The CrowdStrike crisis showed how vulnerable a software monoculture can be. While the West built its digital foundations on American products, Russia and China created parallel ecosystems. The outage demonstrated that excessive reliance on a single software stack is a serious risk, whereas technological diversification and local control offer a strategic advantage. Digital autonomy is thus becoming a geopolitical factor of increasing importance.
Conclusion
The global CrowdStrike outage was more than an IT error: it was a geopolitical stress test. While the West went digitally dark for hours, Russia and China kept running thanks to their own systems and reduced dependence on Microsoft. The question for Europe and the United States now is: do we want digital sovereignty — and are we willing to pay the price for it?