Will a global cloud provider (AWS / Azure / GCP) suffer a multi-region outage over 4 hours in 2026 attributed to a security event?

About

Tracks blast-radius events. Resolves YES if AWS, Azure, or GCP publishes a 2026-dated post-incident review describing a multi-region service degradation lasting more than 4 hours where the root cause is a security event (DDoS, credential abuse, malicious insider, supply-chain compromise) and not a routine config error.

Resolution criteria

Provider PIR (post-incident review) attributes RCA to a security event and confirms duration over 4 hours across at least 2 regions.

Source

AWS Health Dashboard / Service Health History; Azure status history; Google Cloud status; vendor PIRs.

Ambiguity

AMBIGUOUS if the PIR is hedged between "operational" and "security" causes or if duration is between 3.5 h and 4.5 h.

Discussion

Loading comments…