Cybersecurity failures and air travel disruptions: estimating the impact of the CrowdStrike IT outage on Atlanta International Airport
摘要
This study examines the impact of the July 19, 2024, CrowdStrike IT outage on air travel disruptions at Hartsfield-Jackson Atlanta International Airport (ATL), the most affected U.S. airport. Using Synthetic Difference-in-Differences (SDID) methodology, we analyze flight delays and cancellations over July 2024 to estimate the causal effect of the outage. The comparison of ATL to a synthetic control group of airports allows us to quantify the magnitude of disruptions and assess operational resilience. The analysis finds that arrival and departure delays increased by approximately 30 minutes and peaked at 190 minutes, while cancellation rates rose by nearly 10 percentage points and up to 40 percentage points. Our findings contribute to an understanding of aviation security vulnerabilities, IT risk mitigation strategies, and policy implications for ensuring continuity in air transportation systems.