Company
Date Published
Author
Matt Silverlock, Javier Castro
Word count
2418
Language
English
Hacker News points
40

Summary

The Cloudflare R2 object storage service experienced a 59-minute outage on February 6, 2025, affecting multiple services including Stream, Images, Cache Reserve, Vectorize, and Log Delivery. The incident was caused by human error and insufficient validation safeguards during an abuse remediation process for a phishing site hosted on R2. The R2 Gateway service, responsible for authenticating and serving requests to R2's S3 and REST APIs, was inadvertently disabled, leading to a cascade of failures across dependent services. Despite the outage, no data was lost or corrupted within the R2 storage subsystem. Cloudflare has taken steps to remediate the issue, including implementing additional system-level controls, deploying guardrails in the Admin API, and restricting access to product disablement actions. The company is committed to improving its systems and workflows to prevent similar incidents in the future.