On May 20, 2025, at 07:00 UTC, a misconfiguration in the BGP protocol caused a significant disruption to global internet routing, impacting approximately 100 Autonomous Systems (AS). Notably affected entities included Starlink, ByteDance, Disney, UpCloud, Zscaler, and several others. The root cause of this incident was a BGP update message that contained erroneous attributes and data, which were disseminated incorrectly. Furthermore, vulnerabilities in devices from Juniper Networks and Arista Networks compounded the issue, resulting in the automatic termination of multiple BGP sessions for internet connections and subsequent routing instability. The incident lasted for roughly 10 minutes before recovery measures were implemented.
Post-incident analysis points to Hutchison Global Communications or Starcloud as potential sources of the erroneous BGP update message.
