A 'Millisecond' Software Defect Grounded 2,000 Flights, NATS Admits
The air traffic service’s preliminary report into the failure that cancelled more than two thousand flights found the cause in a millisecond: a software defect in the system allocating aircraft identification codes, which corrupted data and forced the four-hour shutdown. NATS promised to “continually improve the critical service we provide”; airlines, already demanding the chief executive’s resignation, read a hundred-million-pound disruption traced to a single timing flaw as confirmation of everything they had alleged about resilience.
The finding manages to be both exculpatory and damning: no cyberattack, no negligence in the moment — just a latent defect that waited years in code handling every flight’s identity, which is precisely the class of failure the 2023 inquiry told NATS to engineer out with better isolation and fallback. A system that converts one millisecond’s corruption into four national hours has a resilience architecture problem, not a bug problem, and the report’s promissory language — continual improvement — is the genre airlines have learned to price at zero. The transport secretary’s “avoidable” verdict now has its technical footnote. Watch the full report’s recommendations and the CAA review’s response — and whether the defect’s vintage embarrasses previous assurance statements.