A new report is putting a hard number on something British businesses have mostly treated as a background risk: what happens if a major cloud provider goes down for a full day.
The Cyber Monitoring Centre, a UK nonprofit, found that more than 60% of British companies now depend on cloud services for functions critical to running their business, and that figure climbs past 80% among FTSE 100 firms. Its report singles out two AWS data center regions, one in Dublin and one in Northern Virginia, as the single points where a failure would ripple furthest. A 24-hour outage in the Dublin region alone could cost UK businesses an estimated £1 billion, the report found, while a similar outage in Virginia would run closer to £650 million, and those numbers only count direct losses to companies using the affected servers, not the wider damage to their customers and supply chains.
This isn’t hypothetical. Last October, a DNS bug in AWS’s Virginia region knocked out core services that a surprising number of other systems quietly depended on, and the disruption reached Lloyds Banking Group and parts of the UK government before crews fixed it. Many of the affected firms had built in multi-region backup systems specifically to avoid this kind of thing, but the report notes that didn’t fully help, since so many services trace back to that one Virginia region regardless of where else a company operates.
“This concentration creates systemic vulnerabilities that require coordinated action from companies, insurers, regulators, and policymakers to manage effectively,” said Will Mayes, the Cyber Monitoring Centre’s CEO. He was careful to frame this as a governance problem rather than a reason to abandon cloud computing, arguing instead that cloud now counts as critical infrastructure and that companies need to design, govern, and invest in it accordingly.
The report’s more uncomfortable finding might be that running multiple cloud providers doesn’t solve the problem on its own. Companies using two or three clouds still tend to cram their most important workloads into the same handful of regions, which means the redundancy exists on paper more than in practice. The report’s authors suggest firms actually map out where their data lives and what revenue depends on it, since many currently can’t answer that question with any confidence.
