• A major outage affecting X's mobile app and website was traced to a Cloudflare (NET) network bug, not the initially speculated cyberattack.
  • The disruption impacted thousands of users globally, particularly in the US, with ripple effects across other platforms like ChatGPT and Canva.
  • The incident highlights systemic risks in shared digital infrastructure and raises questions about platform resilience and corporate transparency.

A widespread service disruption at X, the social media platform formerly known as Twitter, left users unable to refresh timelines, post content, or log in for several hours on November 18, 2025. According to people familiar with the matter, the outage peaked during afternoon hours in the United States, with Downdetector showing thousands of reports across major metropolitan areas.

Initial speculation about the cause took a dramatic turn when Elon Musk, X's owner, suggested on the platform that a "massive cyberattack" might be underway, possibly involving coordinated groups or nation-state actors. However, this theory was quickly refuted as technical teams identified the actual root cause: a critical network bug at Cloudflare, the internet infrastructure provider that X and numerous other services rely upon for content delivery and security.

"We deeply apologize for the disruption this caused," a Cloudflare spokesperson said in a statement, adding that the company is "committed to improving our network resilience to prevent similar incidents." The bug triggered cascading failures that affected not only X but also other major platforms including ChatGPT, Canva, and even some outage tracking services themselves, creating a perfect storm of digital disruption.

Service restoration was completed by late afternoon on the same day, but the incident exposed broader vulnerabilities in the interconnected nature of modern internet infrastructure. This wasn't an isolated event—just the month prior, an Amazon Web Services (AMZN) DNS failure had similarly disrupted numerous online services, suggesting a pattern of fragility in the systems underpinning digital commerce and communication.

Users expressed frustration across social media, with many temporarily migrating to alternative platforms like Bluesky. "When X goes down, it's not just about social media—it affects news dissemination, business communications, and emergency information sharing," noted one technology analyst who requested anonymity due to ongoing consulting work with infrastructure providers.

This marks at least the third significant outage X has experienced in recent years, with previous disruptions in 2023 and earlier in 2025 also linked to Cloudflare-related issues. The recurrence raises questions about whether social media platforms should diversify their infrastructure dependencies or invest more heavily in independent backend solutions.

Attempts to reach X's communications team for additional comment were unsuccessful, though sources indicate the company is reviewing its service level agreements with third-party providers. Meanwhile, industry observers are watching whether this incident will accelerate regulatory discussions about the resilience requirements for critical digital infrastructure, particularly as more economic activity migrates online.

Correction: An earlier version of this article stated the outage affected "millions" of users; while the disruption was widespread, specific user impact numbers were not officially confirmed by X.